CVE Intelligence

Convers Lab WPSubscription vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Convers Lab WPSubscription: 2 record(s), with affected versions and fixes.

CVE-2026-24554 Medium · 4.3 CWE-352 May 25, 2026
WordPress WPSubscription plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1.
CVE-2025-69347 High · 8.6 CWE-639 Mar 25, 2026
WordPress WPSubscription plugin <= 1.8.10 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Convers Lab WPSubscription subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSubscription: from n/a through <= 1.8.10.