Filtered by vendor Wordpress-extensions Subscriptions
Filtered by product Wanotifier Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-6228 1 Wordpress-extensions 1 Wanotifier 2026-11-10 7.5 High
The Notifications for Forms & WordPress Actions WordPress plugin before 2.6 does not validate a user-supplied value before using it to build a server-side file inclusion path, allowing authenticated users with subscriber-level access and above to include and execute arbitrary local PHP files on the server.