TI-2014-01802 CVE-2014-2274 · GHSA-h9px-xxgr-pr55Cross-site request forgery (CSRF) vulnerability in the Subscribe To Comments Reloaded…Priority MEDIUM 40Cross-site request forgery (CSRF) vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cr…CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00911 · Published 2018-03-19 · No fix listed CWE-352