Skip to content
Wpshuffle vulnerabilities
Newest
-
wpshuffle frontend post submission manager lite – guest post and frontend submission forms
Frontend Post Submission Manager Lite <= 1.3.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via post_content Parameter (data-label DOM Sink)
CVE-2026-96649
7.2 High
-
wpshuffle frontend post submission manager lite – frontend posting wordpress plugin
Frontend Post Submission Manager Lite <= 1.2.7 - Unauthenticated Open Redirect via 'requested_page' Parameter
CVE-2026-1296
Public exploit
6.1 Medium
-
wpshuffle frontend post submission manager lite – frontend posting wordpress plugin
Frontend Post Submission Manager Lite <= 1.2.6 - Incorrect Authorization to Unauthenticated Arbitrary Attachment Deletion
CVE-2025-14913
5.3 Medium
-
wpshuffle frontend post submission manager lite – frontend posting wordpress plugin
Frontend Post Submission Manager Lite <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post Modification
CVE-2025-14080
5.3 Medium
-
wpshuffle subscribe to download
WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability
CVE-2025-60224
9.8 Critical
-
wpshuffle wp subscription forms pro
WordPress WP Subscription Forms PRO Plugin <= 2.0.5 - Arbitrary Content Deletion Vulnerability
CVE-2025-60166
4.3 Medium
-
wpshuffle subscribe to unlock
WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability
CVE-2025-60153
7.5 High
-
wpshuffle subscribe to unlock
WordPress Subscribe To Unlock Plugin <= 1.1.5 - Broken Access Control Vulnerability
CVE-2025-60152
4.3 Medium
-
wpshuffle subscribe to download
WordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerability
CVE-2025-60150
7.5 High
-
wpshuffle subscribe to download
WordPress Subscribe to Download plugin <= 2.0.9 - Broken Access Control vulnerability
CVE-2025-60148
4.3 Medium
-
wpshuffle frontend post submission manager lite – frontend posting wordpress plugin, frontend post submission manager +1 more
Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
CVE-2024-8427
4.3 Medium