Plugin icon

Subscribe to Comments

subscribe-to-comments

Vulnerabilities:

7

Last Updated:

October 6, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-10-13
Title
Subscribe to Comments 2.3 - 2.3.2 - Author+ Email Header Injection via From Name Setting
Fixed in
Fixed in 2.3.3
CVSS
3.8 (low)
Published
2026-10-13
Title
Subscribe to Comments < 2.3.3 - Unauthenticated Subscription Management Key Disclosure via Forged Comment Cookie
Fixed in
Fixed in 2.3.3
CVSS
6.5 (medium)
Published
2026-10-09
Title
Subscribe to Comments < 2.3.3 - Reflected XSS via 'ref' Parameter
Fixed in
Fixed in 2.3.3
CVSS
7.1 (high)
Published
2026-08-06
Title
Subscribe to Comments <= 2.3.3 - Author+ Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
4.8 (medium)
Published
2024-10-29
Title
Subscribe to Comments < 2.3.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.3.1
CVSS
6.1 (medium)
Published
2015-07-14
Title
Subscribe to Comments < 2.3 - Authenticated Local File Inclusion
Fixed in
Fixed in 2.3
CVSS
n/a
Published
2006-09-17
Title
Subscribe to Comments < 2.0.8 - Reflected XSS
Fixed in
Fixed in 2.0.8
CVSS
5.8 (medium)