WordPress Plugin Vulnerabilities

Subscribe to Comments < 2.3.3 - Unauthenticated Subscription Management Key Disclosure via Forged Comment Cookie

Description

The plugin does not sign or validate a cookie it trusts to identify a commenter, allowing unauthenticated attackers to disclose a subscriber's management key and silently alter that subscriber's subscriptions.

Proof of Concept

Affects Plugins

Plugin icon
subscribe-to-comments
Fixed in 2.3.3

References

CVE
CVE-2026-91830

Classification

Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
A3: Sensitive Data Exposure
CWE
CWE-200
CVSS
6.5 (medium)

Miscellaneous

Original Researcher
Het Kalariya
Submitter
Het Kalariya
Verified
Yes
WPVDB ID
b2b1638a-f8af-49f7-86a6-a3eeea0526b1

Timeline

Publicly Published
2026-10-13 (about 3 days ago)
Added
2026-10-06 (about 10 days ago)
Last Updated
2026-10-09 (about 6 days ago)

Other

Published
Title
Published
2026-01-21
Title
Tabby Checkout < 5.9.1 - Unauthenticated Information Exposure
Published
2024-02-20
Title
PeproDev Ultimate Invoice < 1.9.8 - Unauthenticated Arbitrary Invoice Access
Published
2026-07-20
Title
Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure
Published
2024-04-05
Title
User Spam Remover < 1.1 - Unauthenticated Sensitive Information Exposure
Published
2024-11-20
Title
Sky Addons for Elementor < 2.6.2 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template