Skip to content
OpenAdvisories

Vendor

Convers Lab

4 known vulnerabilities.

Products

WPSubscription 2 WP SmartPay 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2025-69347

    WordPress WPSubscription plugin <= 1.8.10 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Convers Lab WPSubscription subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSubscription: from n/a through <= 1.8.10.

    Convers Lab WPSubscription
  • High 7.5
    CVE-2025-32689

    WordPress Download Manager and Payment Form plugin <= 2.8.2 - Price Manipulation vulnerability

    Improper Validation of Specified Quantity in Input vulnerability in Convers Lab WP SmartPay smartpay.This issue affects WP SmartPay: from n/a through <= 2.8.2.

    Convers Lab WP SmartPay
  • High 8.8
    CVE-2025-25171

    WordPress WP SmartPay plugin <= 2.7.13 - Account Takeover vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Convers Lab WP SmartPay smartpay allows Authentication Abuse.This issue affects WP SmartPay: from n/a through <= 2.7.13.

    Convers Lab WP SmartPay