Vulnerabilities > Subscribe2 Project > Subscribe2 > 10.18

DATE CVE VULNERABILITY TITLE RISK
2023-06-28 CVE-2023-3407 Unspecified vulnerability in Subscribe2 Project Subscribe2
The Subscribe2 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.40.
network
low complexity
subscribe2-project
4.3
4.3
2023-01-16 CVE-2022-4309 Unspecified vulnerability in Subscribe2 Project Subscribe2
The Subscribe2 WordPress plugin before 10.38 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete arbitrary users by knowing their email via a CSRF attack.
network
high complexity
subscribe2-project
3.1
3.1