Convers Lab vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.1%	CVE-2026-24554WPSubscription (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2026-05-25CVE Database V5CVE-2026-24554 Cross-Site Request Forgery (CSRF) vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1. EPSS 0.1%Vulnerability Convers Lab CWE-352	CVE Database V5	2026-05-25
High	8.6	EPSS 0.4%	CVE-2025-69347WPSubscription (WordPress plugin) · Insecure Direct Object Reference High8.6EPSS 0.4%2026-03-25CVE Database V5CVE-2025-69347 Authorization Bypass Through User-Controlled Key vulnerability in Convers Lab WPSubscription subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSubscription: from n/a through <= 1.8.10. EPSS 0.4%Vulnerability Convers Lab	CVE Database V5	2026-03-25
High	7.5	EPSS 0.3%	CVE-2025-32689Convers Lab WP SmartPay · Improper Validation of Specified Quantity in Input High7.5EPSS 0.3%2025-09-09CVE Database V5CVE-2025-32689 Improper Validation of Specified Quantity in Input vulnerability in Convers Lab WP SmartPay smartpay.This issue affects WP SmartPay: from n/a through <= 2.8.2. EPSS 0.3%Vulnerability	CVE Database V5	2025-09-09
High	8.8	EPSS 0.5%	CVE-2025-25171Convers Lab WP SmartPay · Authentication Bypass Using an Alternate Path or Channel High8.8EPSS 0.5%2025-06-27CVE Database V5CVE-2025-25171 Authentication Bypass Using an Alternate Path or Channel vulnerability in Convers Lab WP SmartPay smartpay allows Authentication Abuse.This issue affects WP SmartPay: from n/a through <= 2.7.13. EPSS 0.5%Vulnerability	CVE Database V5	2025-06-27

Page 1 of 1