Vendors / markjaquith Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now markjaquith records in CISA KEV No markjaquith vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 via the Path to header value.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02422 · Published 2025-07-19 · No fix listed CWE-98
Priority LOW 28
The Subscribe to Comments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.3.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00438 · Published 2024-10-30 · No fix listed CWE-79
Priority LOW 25
A vulnerability, which was classified as problematic, was found in Subscribe to Comments Plugin up to 2.0.7 on WordPress.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0064 · Published 2023-03-05 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 2 0 0
THREATIST.IORead the docs