Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: markjaquith Component: Subscribe To Comments Clear all filters
TI-2015-08061 CVE-2015-10133 · GHSA-rg2c-8v6w-j49r

Subscribe to Comments <= 2.1.2 - Local File Includion

Priority LOW 38

The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 via the Path to header value.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02422 Published 2025-07-19 No fix listed CWE-98
TI-2024-08158 CVE-2024-8792 · GHSA-7688-mgj5-pffp

Subscribe to Comments <= 2.3 - Reflected Cross-Site Scripting

Priority LOW 28

The Subscribe to Comments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00438 Published 2024-10-30 No fix listed CWE-79