CVE-2014-6604

Vulnerability context: CVE-2014-6604 affects the WordPress Subscribe2 plugin, specifically the class-s2-list-table.php component, with exploitation via the ip parameter. The issue is an XSS vulnerability in versions prior to 10.16. What’s affected: Subscribe2 plugin for WordPress (plugin file: cl...

depositphotos.com XSS vulnerability

Vulnerable URL: http://depositphotos.com/subscribe2.html?utmexpid=78670605-22.HsKVbNNARACXW7xApnRmQ.2%5Bpage%5D=?sq=32t8w0%5Bexclude%5D%5B0%5D=login%22%3E%3Csvg/onload%3dalert%28/xssposed/%29%3Ereferrer=http://depositphotos.com/52002839/stock-photo-the-word-nope.html?sq=32t8w0=0 Details:...

WordPress Subscribe2 Plugin <= 8.0 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...

Subscribe2 < 10.16 - XSS

The Subscribe2 – Form, Email Subscribers & Newsletters WordPress plugin was affected by a XSS security vulnerability...

Subscribe2 <= 8.0 - Cross Site Scripting

The Subscribe2 – Form, Email Subscribers & Newsletters WordPress plugin was affected by a Cross Site Scripting security vulnerability...

WordPress Subscribe2 8.0 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...