Description
Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| weDevs | Subscribe2 | ≤ 10.46 | — |
High · 7.1
CVE-2026-73393
EUVD-2026-60800GHSA-4w8h-g4h9-3c46
WordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack