Skip to content
CVE PROGRAM SOURCE RECORD3.4 Low

CVE-2021-36844

WordPress WP Subscribe plugin <= 1.2.12 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin <= 1.2.12 on WordPress.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MyThemeShop WP Subscribe (WordPress plugin)

  • <= 1.2.12 to ≤ 1.2.12affected

References