Medium · 5.9 CVE-2026-66706 EUVD-2026-53909GHSA-2j9x-ww5c-7853

WordPress Subscribe to Comments plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack

Vendor: Mark Jaquith Product: Subscribe to Comments

Description

Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.

Affected products

Vendor	Product	Affected	Fixed
Mark Jaquith	Subscribe to Comments	≤ 2.3.1	—

References

https://patchstack.com/database/wordpress/plugin/subscribe-to-comments/vulnerability/wordpress-subscribe-to-comments-plugin-2-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry