Convers Lab

Products

Product	CVEs	Exploited	Latest
WP SmartPay	2	–	Sep 9, 2025
WPSubscription	2	–	May 25, 2026

CVE-2026-24554 Medium 4.3 WordPress WPSubscription plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
CVE-2025-69347 High 8.6 WordPress WPSubscription plugin <= 1.8.10 - Insecure Direct Object References (IDOR) vulnerability 0.4%
CVE-2025-32689 High 7.5 WordPress Download Manager and Payment Form plugin <= 2.8.2 - Price Manipulation vulnerability 0.3%
CVE-2025-25171 High 8.8 WordPress WP SmartPay plugin <= 2.7.13 - Account Takeover vulnerability 0.5%