Filtered by vendor Themeqx Subscriptions
Filtered by product Letterpress Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-3590 1 Themeqx 1 Letterpress 2025-05-14 6.1 Medium
The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers
CVE-2023-27415 1 Themeqx 1 Letterpress 2024-11-21 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themeqx LetterPress plugin <= 1.1.2 versions.