CVE-2020-25033: blubrry subscribe sidebar – CVSS 6.1 · Watchpost

← All vulnerabilities

CVE-2020-25033

中危 6.1CVE-2020-25033 · Published 31/08/2020 · updated 17/06/2026

要点

CVE-2020-25033 是影响 subscribe sidebar (blubrry) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.98%，高于 62.2% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
subscribe sidebar blubrry	`= 1.3.1`	No fix yet

Description

The Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows subscribe_sidebar.php&status= reflected XSS.

References

wordpress.org/plugins/subscribe-sidebar · Third Party Advisory
zeroaptitude.com/pitticus/subscribe-sidebar-plugin-by-blubrry-v1-3-1-reflected-xss-20-jun-2020 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free