CVE-2025-59413

creationtimestamp| type| source ---|---|--- 2025-09-22 19:43:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzh65rhiqs2u...

CVE-2025-59413

CVE-2025-59413 describes a logic flaw in CubeCart prior to 6.5.11 in the newsletter subscription endpoint. An attacker can set the POST parameter force_unsubscribe to 1, which allows unsubscribing any valid subscriber email address without consent. The issue affects versions before 6.5.11; it has...