Lucene search
Asif Nawaz Minhas (Patchstack Alliance)PATCHSTACK:D0D1DD489300B7C83F185A99BAEC6E43HistoryApr 29, 2022 - 12:00 a.m.
WordPress WP Subscribe plugin <= 1.2.12 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
2022-04-2900:00:00
Asif Nawaz Minhas (Patchstack Alliance)
patchstack.com
14
wordpress
subscribe
plugin
cross-site scripting
vulnerability
patchstack alliance
EPSS
0.001
Percentile
19.4%
Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Asif Nawaz Minhas (Patchstack Alliance) in WordPress WP Subscribe plugin (versions <= 1.2.12).
Solution
Update the WordPress WP Subscribe plugin to the latest available version (at least 1.2.13).
Related
cve
cve
CVE-2021-36844
2022-05-02 20:15:07
wpvulndb
wpvulndb
WP Subscribe < 1.2.13 - Admin+ Stored Cross-Site Scripting
2022-05-02 00:00:00
cnvd
cnvd
WordPress WP Subscribe plugin cross-site scripting vulnerability
2022-05-07 00:00:00
wpexploit
wpexploit
WP Subscribe < 1.2.13 - Admin+ Stored Cross-Site Scripting
2022-05-02 00:00:00
prion
prion
Cross site scripting
2022-05-02 20:15:00
cvelist
cvelist
nvd
nvd
CVE-2021-36844
2022-05-02 20:15:07