Skip to content
OpenAdvisories

Vendor

WP Shuffle

18 known vulnerabilities.

Products

Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin 4 Subscribe to Download 3 WP Subscription Forms 3 Subscribe To Unlock 2 Subscribe to Download Lite 2 Subscribe to Unlock Lite 2 WP Subscription Forms PRO 1 Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.2
    CVE-2026-96649

    Frontend Post Submission Manager Lite <= 1.3.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via post_content Parameter (data-label DOM Sink)

    The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via post_content Parameter (data-label DOM Sink) in all versions up to, and including, 1.3.4 due to insuf…

    WP Shuffle Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms Web / CMS
  • High 7.5
    CVE-2025-68563

    WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Unlock Lite subscribe-to-unlock-lite allows PHP Local File Inclusion.This issue affects Subscribe to Unlock Lite: …

    WP Shuffle Subscribe to Unlock Lite
  • High 7.5
    CVE-2025-60153

    WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpshuffle Subscribe To Unlock subscribe-to-unlock allows PHP Local File Inclusion.This issue affects Subscribe To Unlock: from n/a through…

    WP Shuffle Subscribe To Unlock
  • High 7.5
    CVE-2025-60150

    WordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows PHP Local File Inclusion.This issue affects Subscribe to Download: from n/a t…

    WP Shuffle Subscribe to Download
  • High 7.5
    CVE-2025-39592

    WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Unlock Lite subscribe-to-unlock-lite allows PHP Local File Inclusion.This issue affects Subscribe to Unlock Lite: …

    WP Shuffle Subscribe to Unlock Lite
  • High 7.5
    CVE-2025-32692

    WordPress WP Subscription Forms plugin <= 1.2.4 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows PHP Local File Inclusion.This issue affects WP Subscription Forms: from n/a …

    WP Shuffle WP Subscription Forms
  • High 7.5
    CVE-2025-30782

    WordPress Subscribe to Download Lite plugin <= 1.2.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Download Lite subscribe-to-download-lite allows PHP Local File Inclusion.This issue affects Subscribe to Download …

    WP Shuffle Subscribe to Download Lite
  • High 8.5
    CVE-2025-30784

    WordPress WP Subscription Forms plugin <= 1.2.3 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows SQL Injection.This issue affects WP Subscription Forms: from n/a through <= 1.2.3.

    WP Shuffle WP Subscription Forms
  • High 7.5
    CVE-2025-30785

    WordPress Subscribe to Download Lite plugin <= 1.2.9 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Download Lite subscribe-to-download-lite allows PHP Local File Inclusion.This issue affects Subscribe to Download …

    WP Shuffle Subscribe to Download Lite