osd subscribe vulnerabilities and fixes
Recent CVEs affecting osd subscribe, with upgrade or downgrade steps. 1 tracked.
Also searched as: osdsubscribe.
osd subscribe has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-09-10. Highest priority: CVE-2021-38351 (score 41/100).
- CVE-2021-38351 MEDIUM 6.1 UPGRADE The OSD Subscribe WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the osd_subscribe_messa
FAQ
How do I fix osd subscribe vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is osd subscribe being exploited right now?
None of the tracked osd subscribe CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which osd subscribe CVE should I patch first?
CVE-2021-38351 currently ranks highest (41/100): The OSD Subscribe WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the osd_subscribe_messa.