CVE-2026-91073 | Subscribe Forms Plugin up to 1.6.2 on WordPress cross site scripting

September 23, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Subscribe Forms Plugin up to 1.6.2 on WordPress. This affects an unknown part. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-91073. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More