Subscribe to Comments CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Subscribe to Comments CVE published 2026-10-16

CVE-2026-91830

The Subscribe to Comments WordPress plugin before 2.3.3 does not sign or validate a cookie it trusts to identify a commenter, allowing unauthenticated attackers to disclose a subscriber's management key and silently alter that subscriber's subscriptions. This vulnerability affects WordPress installations with the Subscribe to Comments plugin, potentially impacting subscriber management and notification sy [truncated]