CVE-2026-73393

Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...

CVE-2026-73393

The WordPress Subscribe2 plugin (versions ≤ 10.46) contains an unauthenticated reflected XSS flaw, exploitable via network without privileges; CVSS 7.1 (High). Patchstack is the CNA. No exploitation evidence or fix version is provided in the documents. Monitor for updates. Patchstack advisory: ht...

CVE-2026-73393 WordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...

CVE-2026-73393 WordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...

CVE-2026-73393

Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...

EUVD-2026-60800

Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...

CVE-2026-73393: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...

PT-2026-77114

Name of the Vulnerable Software and Affected Versions Subscribe2 versions prior to 10.47 Description An unauthenticated Cross Site Scripting XSS issue exists in the Subscribe2 WordPress plugin. This flaw allows a remote attacker to execute malicious scripts in the browser of a user without...

WordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by timomangcut in WordPress Plugin Subscribe2 versions = 10.46...

CVE-2026-14331

The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a public subscription form, leading to Reflected Cross-Site Scripting that executes in the browser of an unauthenticated visitor who interacts with the form through a crafted link...

CVE-2026-14331

The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a public subscription form, leading to Reflected Cross-Site Scripting that executes in the browser of an unauthenticated visitor who interacts with the form through a crafted link...

CVE-2026-14331 Subscribe2 < 10.46 - Reflected XSS via email Parameter

The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a public subscription form, leading to Reflected Cross-Site Scripting that executes in the browser of an unauthenticated visitor who interacts with the form through a crafted link...

CVE-2026-14331 Subscribe2 < 10.46 - Reflected XSS via email Parameter

The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a public subscription form, leading to Reflected Cross-Site Scripting that executes in the browser of an unauthenticated visitor who interacts with the form through a crafted link...

CVE-2026-14331

The Subscribe2 WordPress plugin, in versions before 10.46 , is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the improper escaping of a user-supplied value before it is reflected into a public subscription form. An unauthenticated visitor can execute malicious scripts in ...

CVE-2026-14331: Improper Neutralization of Input During Web Page Generation

The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a public subscription form, leading to Reflected Cross-Site Scripting that executes in the browser of an unauthenticated visitor who interacts with the form through a crafted link...

CVE-2026-24944

Missing Authorization vulnerability in weDevs Subscribe2 subscribe2 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe2: from n/a through = 10.44...

CVE-2026-24944

Missing Authorization vulnerability in weDevs Subscribe2 subscribe2 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe2: from n/a through = 10.44...

CVE-2026-24944

Missing Authorization vulnerability in weDevs Subscribe2 subscribe2 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe2: from n/a through = 10.44...

CVE-2026-24944 WordPress Subscribe2 plugin <= 10.44 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs Subscribe2 subscribe2 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe2: from n/a through = 10.44...

CVE-2026-24944

CVE-2026-24944 affects the WordPress Subscribe2 plugin up to version 10.44, describing a Missing Authorization/Broken Access Control vulnerability that allows exploitation of incorrectly configured access control security levels. Public sources (NVD, Red Hat, CVE/CVE-List, Patchstack) corroborate...