Skip to content
Sign in
4.3 Medium

CVE-2023-1844 The Subscribe2 plugin for WordPress is vulnerable to unauthorized access to email functionality due to a missing…

Description

The Subscribe2 plugin for WordPress is vulnerable to unauthorized access to email functionality due to a missing capability check when sending test emails in versions up to, and including, 10.40. This makes it possible for author-level attackers to send emails with arbitrary content and attachments to site users.

Affected products and versions

Product Affected versions Fixed in
Subscribe2 – Form, Email Subscribers & Newsletters 10.40 earliest → 10.40 No fix stated

Other CVEs of Subscribe2 – Form, Email Subscribers & Newsletters

The 3 CVEs of Subscribe2 – Form, Email Subscribers & Newsletters →
CVE-2024-11582 The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting… 7.2 High CVE-2023-3407 The Subscribe2 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.40 4.3 Medium
Track this CVE