Subscription DNA®

Subscription DNA® has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Subscription DNA® has a vendor fix available, so running the current release closes it.

All of these findings were reported by SOPROBRO. Subscription DNA® is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Subscription DNA® vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-24555

Subscription DNA <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Subscription DNA&reg; banner
Latestv2.2

Subscription DNA&reg;

subscriptiondna

Author

subscriptiondna

5.0(3)
100/100
Last Updated
2026-07-14 (2mo ago)
Active Installs
20+
Downloads
4,727
Requires WP
3.0+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2014-01-02 (13y ago)

Automate Your Recurring Billing Business with Subscription DNA&reg; Subscription Billing, Membership & Paywall Software Subscription DNA’s powerful SaaS platform creatively integrates subscription billing, subscription management, paywalls and authentication. With our customized front-end options, customers can login and manage their own accounts right from your site. With our robust administrative console you can quickly manage accounts, automate recurring invoicing, analyze reports, communicate with targeted user groups, process transactions, generate payment requests, track member login statistics and much much more. With our hands-on team approach and flexibility, you can leverage ongoing support and custom development services on your terms. Subscription DNA quickly integrates with your site to enable registration, customer self-serve accounting screens, and protect premium content assets with powerful and solid paywall solutions. Subscription DNA pricing can start as low as $199/m and we offer both a hybrid % per transaction arrangement or tiered rates. Please visit http://www.SubscriptionDNA.com or contact us for more information. As a benefit to Subscription DNA&reg; clients who use WordPress, this plugin can be enabled and speeds up integration and provides a number of custom tools to help quickly tie in the subscriber functionality. Our support team provides hands on integration help and custom enhancements as needed. Please Note: This plugin ONLY works as an integration interface with an active/paid account to Subscription DNA, our full-featured SaaS cloud billing, paywall and membership management platform. You’ll need a Subcription DNA account to be able to activate the plugin. For production, you will need a payment gateway supporting tokenization and an SSL Certificate. We do support Paypal standard for payments, however, a payment gateway is ideal for utilizing the full power of Subscription DNA. For more information, including features, pricing and sandbox demonstration, please contact us: http://www.SubscriptionDNA.com/contact/ Plugin Features Include: Member and Group Self Serve Screens: Free Registration or Paid Subscription Signup Account Login Forgot My Password My Profile My Password My Subscriptions My Payment Methods My Transactions Manage Group Members Gift Subscriptions Admin: Generate standard member and group self-serve screens above Create a member menu or use an optional widget based menu Paywall protection in several flavors Limit secure post summary length Protect access to any Page / Post / Post Taxonomy Protect FTP folder content anywhere within the worpress path Build custom signup forms Optionally enable payment by cash/check Your Subscription DNA administrative console is managed securely outside of WordPress Customize: Layout aesthetic or API connection customizations can be made to the layout or code as needed w/o risk of overwriting from a plugin update. Subscription DNA’s development team is available as needed to help enhance both the UI and functional aspects of your site or administrative console. Attention Developers You’re out there. Innovating, sometimes by task, sometimes by passion. We crave your input. Help make our platform better and perhaps earn some bucks for your suggestions, widgets and custom apps. Who knows, maybe you’ll even procure an opportunity to become part of our team. Register now for sandbox access and API reference documentation and let’s work together.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C