WX Subscribe CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review WX Subscribe CVE published 2026-10-16

CVE-2026-91833

The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 is vulnerable to SQL injection attacks. This vulnerability allows unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured. The vulnerability can be exploited by unauthenticated attackers, potentially leading to data breaches or unauthorized access. Defenders must verify payment key configu [truncated]