CVE-2025-60150

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows PHP Local File Inclusion.This issue affects Subscribe to Download: from n/a through = 2.0.9...

CVE-2024-1370

The Maintenance Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the subscribedownload function hooked via AJAX action in all versions up to, and including, 1.0.8. This makes it possible for authenticated attackers, with subscriber access...

PT-2024-17982

Name of the Vulnerable Software and Affected Versions Maintenance Page plugin for WordPress versions up to, and including, 1.0.8 Description The issue is related to unauthorized access of data due to a missing capability check on the subscribe download function hooked via AJAX action. This allows...