TI-2026-47374 CVE-2026-66706 · GHSA-2j9x-ww5c-7853
WordPress Subscribe to Comments plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
Priority LOW 26
Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.
No Mark Jaquith vulnerabilities are listed in CISA KEV.
2 records
Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.
Multiple cross-site scripting (XSS) vulnerabilities in bad-behavior-wordpress-admin.php in the Bad Behavior plugin before 2.0.47 and 2.2.x before 2.2.5 for WordPress allow remote attackers to inject arbitrary web script…