CVE-2026-120531

The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 10.47 . The root cause is insufficient input sanitization and output escaping related to the data[ip] parameter. This flaw allows unau...

EUVD-2026-119330

The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dataip’ parameter in all versions up to, and including, 10.47 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

RG-EW Series Routers Command Injection Vulnerability

Ruijie RG-EW Series Routers is a router from China Ruijie Networks Ruijie. A security vulnerability exists in RG-EW1200G PRO Wireless Routers EW3.01B11P204 version, RG-EW1800GX PRO Wireless Routers EW3.01B11P204 version, RG-EW3200GX PRO Wireless Routers EW3.0 A security vulnerability exists in...