CVE-2021-36844

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin <= 1.2.12 on WordPress.

Affected Platforms

Weakness Type

CWE-79

References

• https://patchstack.com/database/vulnerability/wp-subscribe/wordpress-wp-subscrib…
• https://wordpress.org/plugins/wp-subscribe/#developers
• https://patchstack.com/database/vulnerability/wp-subscribe/wordpress-wp-subscrib…
• https://wordpress.org/plugins/wp-subscribe/#developers