Wedevs Subscribe2 vulnerabilities

• unknown subscribe2 WordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerability CVE-2026-73393 7.1 HighAugust 18, 2026
• unknown subscribe2 WordPress Subscribe2 plugin <= 10.44 - Broken Access Control vulnerability CVE-2026-24944 6.5 MediumFebruary 20, 2026
• wedevs subscribe2 – form, email subscribers & newsletters Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter CVE-2024-11582 7.2 HighFebruary 19, 2025
• subscribe2 project subscribe2, wedevs subscribe2 – form, email subscribers & newsletters +1 more Subscribe2 <= 10.40 - Missing Authorization CVE-2023-1844 4.3 MediumJune 28, 2023
• subscribe2 project subscribe2, wedevs subscribe2 – form, email subscribers & newsletters +1 more Subscribe2 <= 10.40 - Cross-Site Request Forgery CVE-2023-3407 4.3 MediumJune 28, 2023