Subscribe to Download vulnerabilities

2 known vulnerabilities in Subscribe to Download from Wpshuffle. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Subscribe to Download: Deserialization of Untrusted Data

  CVE-2025-60224Oct 22, 2025Wpshuffle

  Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through <= 2.0.9.

• 7.5 High severity

  Subscribe to Download: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-60150Sep 26, 2025Wpshuffle

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows PHP Local File Inclusion.This issue affects Subscribe to Download: from n/a th