CVE-2026-73393

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Unauthenticated Cross Site Scripting (XSS) vulnerability in Subscribe2 versions up to 10.46.

An attacker can inject malicious script that executes in the user's browser, potentially leading to session theft or account takeover.

Update the Subscribe2 plugin to the latest version that includes the security fix.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.