https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T18:39:47.081873+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-91830 CVE-2026-91830 — Subscribe to Comments < 2.3.3 - Unauthenticated Subscription Management Key Disclosure via Forged Comment Cookie 2026-10-16T18:39:47.083212+00:00

Affected: Unknown Subscribe to Comments

The Subscribe to Comments WordPress plugin before 2.3.3 does not sign or validate a cookie it trusts to identify a commenter, allowing unauthenticated attackers to disclose a subscriber's management key and silently alter that subscriber's subscriptions.