Medium · 4.3 CVE-2026-24554 EUVD-2026-31755GHSA-gfpm-cpmq-9ff5

WordPress WPSubscription plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Published May 25, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery.

This issue affects WPSubscription: from n/a through 1.9.1.

Vendor	Product	Affected	Fixed
Convers Lab	WPSubscription	≤ 1.9.1	—