WordPress plugin
Subscribe To Unlock security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium1
- Low0
All Subscribe To Unlock vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Authenticated (Contributor+) Local File Inclusion ≤1.1.5No patch available | CVE-2025-60153 |
- High7.5Authenticated (Contributor+) Local File Inclusion
≤1.1.5No patch available
Subscribe To Unlock: common questions
Does Subscribe To Unlock have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Subscribe To Unlock: 1 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Subscribe To Unlock I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Subscribe To Unlock vulnerability?
CVE-2025-60152, published Sep 26, 2025: Subscribe To Unlock <= 1.1.5 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any Subscribe To Unlock vulnerability listed in CISA KEV?
No. None of the known Subscribe To Unlock vulnerabilities is currently listed in the CISA KEV catalog.