Wpkube Subscribe To Comments Reloaded vulnerabilities
3 vulnerabilities
Known vulnerabilities in Wpkube Subscribe To Comments Reloaded, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2022-29414wordpress · subscribe-to-comments-reloaded +2 moreWordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesMultiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin <= 211130 on WordPress allows attackers to clean up Log archive, download system info file, plugin system settings, plugin options settings, generate a new key, reset all options, change notifications settings, management page settings, comment form settings, manage subscriptions > mass update settings, manage subscriptions > add a new subscription, update subscription, delete Subscription.EPSS0.39%HighCVE-2024-31249wordpress · subscribe-to-comments-reloaded +1 moreWordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerabilityInsertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725.EPSS0.51%MediumCVE-2026-4409wordpress · subscribe-to-comments-reloaded +1 moreSubscribe To Comments Reloaded <= 240119 - Improper Authorization to Unauthenticated Arbitrary Subscription ManagementThe Subscribe To Comments Reloaded plugin for WordPress is vulnerable to unauthorized modification of data due to a leaked secret key and usage of a weak hash generation algorithm in all versions up to, and including, 240119. This makes it possible for unauthenticated attackers to extract the global key from any public post page, forge authorization keys and manage comment subscription preferences for arbitrary usersEPSS0.39%