Replyable – Subscribe to Comments and Reply by Email

Replyable – Subscribe to Comments and Reply by Email has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2023; all 3 are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 8.5 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Deserialization Of Untrusted Data, Missing Authorization.

Every one of the 3 issues recorded for Replyable – Subscribe to Comments and Reply by Email has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

7.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Replyable – Subscribe to Comments and Reply by Email vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.5CVE-2022-4265

Replyable – Subscribe to Comments and Reply by Email <= 2.2.9 - Authenticated (Subscriber+) PHP Object Injection via prompt_dismiss_notice

Read the full analysis

Vulnerability Records

3 records


2023-02-08 00:00	Replyable – Subscribe to Comments and Reply by Email <= 2.2.9 - Authenticated (Subscriber+) PHP Object Injection via prompt_dismiss_notice Replyable <= 2.2.9	`CVE-2022-4265`	8.5 High	István Márton	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Replyable < 2.2.9	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes
2015-09-10 00:00	Replyable – Subscribe to Comments and Reply by Email < 1.4.6 - Cross-Site Scripting Replyable < 1.4.6	`CVE-2015-9411`	6.1 Medium	Chris Klosowski	Yes

Showing 1–3 of 3 reports