Unrated severityNVD Advisory· Published Oct 16, 2026
CVE-2026-91830
CVE-2026-91830
Description
The Subscribe to Comments WordPress plugin before 2.3.3 does not sign or validate a cookie it trusts to identify a commenter, allowing unauthenticated attackers to disclose a subscriber's management key and silently alter that subscriber's subscriptions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2.3.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.