{"id":19004048,"date":"2026-08-26T23:37:22","date_gmt":"2026-08-26T23:37:22","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=topic&#038;p=19004048"},"modified":"2026-08-27T07:04:25","modified_gmt":"2026-08-27T07:04:25","slug":"unpatched-vulnerability-4","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/unpatched-vulnerability-4\/","title":{"rendered":"Unpatched Vulnerability"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">I&#8217;m seeing the warning below, so have deactivated this plugin. Is it being patched?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Unauthenticated Cross Site Scripting (XSS) in Subscribe2 &lt;= 10.46 versions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This vulnerability appears to be unpatched. Stay tuned for upcoming plugin updates.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Improper Neutralization of Input During Web Page Generation (&#8216;Cross-site Scripting&#8217;)<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.<\/em><\/p>\n","protected":false},"template":"","class_list":["post-19004048","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19004048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":1,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19004048\/revisions"}],"predecessor-version":[{"id":19004217,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19004048\/revisions\/19004217"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=19004048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}