Convers Lab vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Convers Lab products: 2 record(s), with severity, exploitation and fixes.

WPSubscription 2

Exploited only (KEV) →

CVE-2026-24554 Medium · 4.3 CWE-352 May 25, 2026

WordPress WPSubscription plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1.

CVE-2025-69347 High · 8.6 CWE-639 Mar 25, 2026

WordPress WPSubscription plugin <= 1.8.10 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Convers Lab WPSubscription subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSubscription: from n/a through <= 1.8.10.