Low · 3.4 CVE-2021-36844 EUVD-2021-23420GHSA-vjqw-jfj9-mpqf

WordPress WP Subscribe plugin <= 1.2.12 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published May 2, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin <= 1.2.12 on WordPress.

Vendor	Product	Affected	Fixed
MyThemeShop	WP Subscribe (WordPress plugin)	<= 1.2.12 – ≤ 1.2.12	—