EUVD-2026-102684

The Subscribe to Comments WordPress plugin before 2.3.3 does not sign or validate a cookie it trusts to identify a commenter, allowing unauthenticated attackers to disclose a subscriber's management key and silently alter that subscriber's subscriptions...

PT-2026-115480

Name of the Vulnerable Software and Affected Versions Subscribe to Comments WordPress plugin versions prior to 2.3.3 Description The plugin fails to sign or validate a cookie used to identify commenters. This allows unauthenticated attackers to disclose a subscriber's management key and silently...