Read the docs

wpshuffle

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

wpshuffle records in CISA KEV

No wpshuffle vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

18 records

Priority LOW 37

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via post_content Parameter (data-label DOM Sink) in all versions u…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00247 Published 2026-09-30 No fix listed CWE-79
Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Unlock Lite subscribe-to-unlock-lite allows PHP Local File Inclusion.This i…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00908 Published 2025-04-16 No fix listed CWE-98
Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows PHP Local File Inclusion.This issue a…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00926 Published 2025-04-09 No fix listed CWE-98
Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Download Lite subscribe-to-download-lite allows PHP Local File Inclusion.Th…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01045 Published 2025-03-27 No fix listed CWE-98
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows SQL Injection.This issue affects WP Subscription Forms:…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00469 Published 2025-03-27 No fix listed CWE-89
Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows PHP Local File Inclusion.This issue affect…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0061 Published 2025-09-26 No fix listed CWE-98
Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows PHP Local File Inclusion.This issue af…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0061 Published 2025-09-26 No fix listed CWE-98
Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Download Lite subscribe-to-download-lite allows PHP Local File Inclusion.Th…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00852 Published 2025-04-01 No fix listed CWE-98
Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Unlock Lite subscribe-to-unlock-lite allows PHP Local File Inclusion.This i…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00387 Published 2025-12-24 No fix listed CWE-98
Priority LOW 28

The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the 'requested_page' POST parameter in the ve…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00515 Published 2026-02-18 No fix listed CWE-601
Priority LOW 25

Missing Authorization vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscription Forms: from n/a thr…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00394 Published 2025-04-16 No fix listed CWE-862
Priority LOW 20

Missing Authorization vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe To Unlock: from n/a through <=…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2025-09-26 No fix listed CWE-862
Priority LOW 20

Missing Authorization vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe to Download: from n/a thro…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2025-09-26 No fix listed CWE-862
Priority LOW 20

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_global_settings and proc…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00323 Published 2024-09-06 No fix listed CWE-862
Priority LOW 19

Missing Authorization vulnerability in wpshuffle WP Subscription Forms PRO wp-subscription-forms-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscription Forms PRO: f…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00198 Published 2025-09-26 No fix listed CWE-862
Open these records in search →