Vulnerabilidades de Convers Lab
CVEs publicadas que afetam produtos de Convers Lab: 2 registro(s), com severidade, exploração e correções.
CVE-2026-24554
Média · 4.3
CWE-352 25/05/2026
WordPress WPSubscription plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery.
This issue affects WPSubscription: from n/a through 1.9.1.
CVE-2025-69347
Alta · 8.6
CWE-639 25/03/2026
WordPress WPSubscription plugin <= 1.8.10 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Convers Lab WPSubscription subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSubscription: from n/a through <= 1.8.10.