CVE-2014-6604

Mô tả

Tham khảo

• barmat.io/blog/2014/10/01/stored-xss-vulnerability-in-the-wordpress-plugin-subscribe2 · Exploit
• plugins.trac.wordpress.org/changeset/993564/subscribe2 · Release Notes

Lỗ hổng khác của subscribe2

• CVE-2023-3407TRUNG BÌNH 4.3The Subscribe2 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.40. This is due to miss…
• CVE-2023-1844TRUNG BÌNH 4.3The Subscribe2 plugin for WordPress is vulnerable to unauthorized access to email functionality due to a missing capability check when sendi…
• CVE-2022-4309THẤP 3.1The Subscribe2 WordPress plugin before 10.38 does not have CSRF check when deleting users, which could allow attackers to make a logged in a…