Vulnerabilities

TI-2025-33278 CVE-2025-53311 · GHSA-fqc7-67jw-gwxr

WordPress Navayan Subscribe plugin <= 1.13 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Amol Nirmala Waman Navayan Subscribe navayan-subscribe allows Stored XSS.This issue affects Navayan Subscribe: from n/a through <= 1.13.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00123 Published 2025-06-27 No fix listed CWE-352

TI-2024-37024 CVE-2024-55988 · GHSA-r65p-7pcp-4hmm

WordPress Navayan CSV Export Plugin <= 1.0.9 - SQL Injection vulnerability

MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amol Nirmala Waman Navayan CSV Export navayan-csv-export allows Blind SQL Injection.This issue affects Navayan CSV Exp…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01171 Published 2024-12-16 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Navayan Subscribe plugin <= 1.13 - Cross Site Request Forgery (CSRF) Vulnerability

WordPress Navayan CSV Export Plugin <= 1.0.9 - SQL Injection vulnerability