Skip to content
Noroxi

Subscribe2 – Form, Email Subscribers & Newsletters

subscribe2 · plugin

Known security vulnerabilities for Subscribe2 – Form, Email Subscribers & Newsletters. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

latest Aug 18, 2026

Vulnerabilities

  • CVE-2024-11582

    Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter

    High 7.2

  • CVE-2026-73393

    WordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-24944

    WordPress Subscribe2 plugin <= 10.44 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2014-6604

    Cross-site scripting (XSS) vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress allows remote attack

    Medium 6.1

  • CVE-2023-3407

    Subscribe2 <= 10.40 - Cross-Site Request Forgery

    Medium 4.3

  • CVE-2023-1844

    Subscribe2 <= 10.40 - Missing Authorization

    Medium 4.3

← Back to directory