Vulnerabilities in wpshuffle
11 resultsCVE-2025-60150HIGHWordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2025-60153HIGHWordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2025-60224CRITICALWordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2026-1296MEDIUMFrontend Post Submission Manager Lite <= 1.2.7 - Unauthenticated Open Redirect via 'requested_page' ParameterEPSS 0.5%CVE-2024-8427MEDIUMFrontend Post Submission Manager Lite – Frontend Posting WordPress Plugin <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings UpdateEPSS 0.3%CVE-2025-14913MEDIUMFrontend Post Submission Manager Lite <= 1.2.6 - Incorrect Authorization to Unauthenticated Arbitrary Attachment DeletionEPSS 0.3%CVE-2025-14080MEDIUMFrontend Post Submission Manager Lite <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post ModificationEPSS 0.3%CVE-2026-96649HIGHFrontend Post Submission Manager Lite <= 1.3.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via post_content Parameter (data-label DOM Sink)EPSS 0.2%CVE-2025-60152MEDIUMWordPress Subscribe To Unlock Plugin <= 1.1.5 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-60148MEDIUMWordPress Subscribe to Download plugin <= 2.0.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-60166MEDIUMWordPress WP Subscription Forms PRO Plugin <= 2.0.5 - Arbitrary Content Deletion VulnerabilityEPSS 0.2%