Medium severity4.3NVD Advisory· Published Jun 28, 2023· Updated Apr 8, 2026
CVE-2023-1844
CVE-2023-1844
Description
The Subscribe2 plugin for WordPress is vulnerable to unauthorized access to email functionality due to a missing capability check when sending test emails in versions up to, and including, 10.40. This makes it possible for author-level attackers to send emails with arbitrary content and attachments to site users.
Affected products
1- cpe:2.3:a:subscribe2_project:subscribe2:*:*:*:*:*:wordpress:*:*Range: <=10.40
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.