WeDevs Subscribe2 – Form, Email Subscribers & Newsletters

• CVE-2026-120531 High 7.2 Subscribe2 – Form, Email Subscribers & Newsletters <= 10.47 - Unauthenticated Stored Cross-Site Scripting via 'data[ip]' Parameter –
• CVE-2024-11582 High 7.2 Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter 0.3%
• CVE-2023-1844 Medium 4.3 Subscribe2 <= 10.40 - Missing Authorization 0.5%
• CVE-2023-3407 Medium 4.3 Subscribe2 <= 10.40 - Cross-Site Request Forgery 0.3%