MyThemeShop WP Subscribe (WordPress plugin) vulnerabilities

Latest MyThemeShop WP Subscribe (WordPress plugin) CVEs

Newest publication first

1. CVE-2021-36844 WordPress WP Subscribe plugin <= 1.2.12 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

   Published 2022-05-02

   Medium·CVSS 4.8 EPSS 0.57%

   Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin <= 1.2.12 on WordPress.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.