Log in Start free

wpshuffle

Products

ProductCVEsExploitedLatest
Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin4–Feb 18, 2026
Subscribe to Download3–Oct 22, 2025
Subscribe To Unlock2–Sep 26, 2025
Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms1–Sep 30, 2026
WP Subscription Forms PRO1–Sep 26, 2025

Exploited and recent CVEs

  • CVE-2026-96649 High 7.2 Frontend Post Submission Manager Lite <= 1.3.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via post_content Parameter (data-label DOM Sink) 0.2%
  • CVE-2026-1296 Medium 6.1 Frontend Post Submission Manager Lite <= 1.2.7 - Unauthenticated Open Redirect via 'requested_page' Parameter 0.5%
  • CVE-2025-14913 Medium 5.3 Frontend Post Submission Manager Lite <= 1.2.6 - Incorrect Authorization to Unauthenticated Arbitrary Attachment Deletion 0.3%
  • CVE-2025-14080 Medium 5.3 Frontend Post Submission Manager Lite <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post Modification 0.3%
  • CVE-2025-60224 Critical 9.8 WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability 0.6%
  • CVE-2025-60166 Medium 4.3 WordPress WP Subscription Forms PRO Plugin <= 2.0.5 - Arbitrary Content Deletion Vulnerability 0.2%
  • CVE-2025-60153 High 7.5 WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability 0.6%
  • CVE-2025-60152 Medium 4.3 WordPress Subscribe To Unlock Plugin <= 1.1.5 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-60150 High 7.5 WordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-60148 Medium 4.3 WordPress Subscribe to Download plugin <= 2.0.9 - Broken Access Control vulnerability 0.2%
  • CVE-2024-8427 Medium 4.3 Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update 0.3%