Wpshuffle vulnerabilities
We track 4 vulnerabilities in Wpshuffle products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.
Latest Wpshuffle vulnerabilities
- 7.2 High severity
Frontend Post Submission Manager Lite – Guest…: Improper Neutralization of Input During Web Page Generation
The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via post_content Parameter (data-label DOM Sink) in all versions up to, and including, 1.3.4 due to insuff
- 9.8 Critical severity
Subscribe to Download: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through <= 2.0.9.
- 7.5 High severity
Subscribe To Unlock: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows PHP Local File Inclusion.This issue affects Subscribe To Unlock: from n/a through
- 7.5 High severity
Subscribe to Download: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows PHP Local File Inclusion.This issue affects Subscribe to Download: from n/a th