I13websolution Email Subscription Popup — known CVE vulnerabilities

Every CVE whose affected-product data names I13websolution Email Subscription Popup, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-30489 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <= 1.2.16 versions.
• CVE-2024-27960 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Email…
• CVE-2024-11195 — CVSS 6.4 (medium): The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_email_subscribe_form…
• CVE-2023-6527 — CVSS 6.1 (medium): The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER header in all…
• CVE-2023-6555 — CVSS 6.1 (medium): The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting it back in the page…