Priority MEDIUM 50
Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through <= 2.0.9.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00581 · Published 2025-10-22 · No fix listed CWE-502
Priority LOW 37
The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via post_content Parameter (data-label DOM Sink) in all versions u…
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00247 · Published 2026-09-30 · No fix listed CWE-79
Priority LOW 37
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Unlock Lite subscribe-to-unlock-lite allows PHP Local File Inclusion.This i…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00908 · Published 2025-04-16 · No fix listed CWE-98
Priority LOW 37
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows PHP Local File Inclusion.This issue a…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00926 · Published 2025-04-09 · No fix listed CWE-98
Priority LOW 37
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Download Lite subscribe-to-download-lite allows PHP Local File Inclusion.Th…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.01045 · Published 2025-03-27 · No fix listed CWE-98
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows SQL Injection.This issue affects WP Subscription Forms:…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00469 · Published 2025-03-27 · No fix listed CWE-89
Priority LOW 36
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows PHP Local File Inclusion.This issue affect…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0061 · Published 2025-09-26 · No fix listed CWE-98
Priority LOW 36
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows PHP Local File Inclusion.This issue af…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0061 · Published 2025-09-26 · No fix listed CWE-98
Priority LOW 36
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Download Lite subscribe-to-download-lite allows PHP Local File Inclusion.Th…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00852 · Published 2025-04-01 · No fix listed CWE-98
Priority LOW 35
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Unlock Lite subscribe-to-unlock-lite allows PHP Local File Inclusion.This i…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00387 · Published 2025-12-24 · No fix listed CWE-98
Priority LOW 30
The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to an incorrect authorization check on the 'media_delete_action' function…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00316 · Published 2025-12-25 · No fix listed CWE-862
Priority LOW 30
The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.5.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00279 · Published 2025-12-21 · No fix listed CWE-862
Priority LOW 28
The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the 'requested_page' POST parameter in the ve…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00515 · Published 2026-02-18 · No fix listed CWE-601
Priority LOW 25
Missing Authorization vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscription Forms: from n/a thr…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00394 · Published 2025-04-16 · No fix listed CWE-862
Priority LOW 20
Missing Authorization vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe To Unlock: from n/a through <=…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00241 · Published 2025-09-26 · No fix listed CWE-862
Priority LOW 20
Missing Authorization vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe to Download: from n/a thro…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00241 · Published 2025-09-26 · No fix listed CWE-862
Priority LOW 20
The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_global_settings and proc…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00323 · Published 2024-09-06 · No fix listed CWE-862
Priority LOW 19
Missing Authorization vulnerability in wpshuffle WP Subscription Forms PRO wp-subscription-forms-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscription Forms PRO: f…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00198 · Published 2025-09-26 · No fix listed CWE-862