Unknown Subscribe To Comments vulnerabilities

2 CVEs affecting Unknown Subscribe To Comments, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-91830, published 2026-10-16.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-91830, published 2026-10-16. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. The Subscribe to Comments WordPress plugin before 2.3.3 does not sign or validate a cookie it trusts to identify a commenter, allowing unauthenticated attackers to disclose a subscriber's management…
• CVE-2026-91829, published 2026-10-11. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. The Subscribe to Comments WordPress plugin before 2.3.3 does not properly validate a parameter before reflecting it into a link target, allowing unauthenticated attackers to perform Reflected…