Subscribe2 – Form, Email Subscribers & Newsletters vulnerabilities

2 known vulnerabilities in Subscribe2 – Form, Email Subscribers & Newsletters from weDevs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Subscribe2 – Form, Email Subscribers &…: Improper Neutralization of Input During Web Page Generation

  CVE-2026-120531Nov 7, 2026weDevs

  The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data[ip]’ parameter in all versions up to, and including, 10.47 due to insufficient input sanitization and output escaping. This m

• 7.2 High severity

  Subscribe2 – Form, Email Subscribers &…: Improper Neutralization of Input During Web Page Generation

  CVE-2024-11582Feb 19, 2025weDevs

  The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ip parameter in all versions up to, and including, 10.43 due to insufficient input sanitization and output escaping. This makes it