What’s Vulnerable › Products
wedevs Subscribe2 – Form, Email Subscribers & Newsletters vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your wedevs Subscribe2 – Form, Email Subscribers & Newsletters version is affected
Latest wedevs Subscribe2 – Form, Email Subscribers & Newsletters vulnerabilities
- CVE-2026-14331 — Subscribe2 < 10.46 - Reflected XSS via email Parameter (CVSS 6.1)
- CVE-2024-11582 — Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter (CVSS 7.2)
- CVE-2023-3407 — Subscribe2 <= 10.40 - Cross-Site Request Forgery (CVSS 4.3)
- CVE-2023-1844 — Subscribe2 <= 10.40 - Missing Authorization (CVSS 4.3)
- CVE-2022-4309 — Subscribe2 < 10.38 - User Deletion via CSRF (CVSS 3.1)
- CVE-2014-6604 — (CVSS 6.1)