| 2026-10-07 |
WPSEC-2026-0603 |
Subscribe to Comments <= 2.3.2 - Unauthenticated Sensitive Information Exposure via Subscriptions to Non-Public Posts |
Low 3.7 |
2.3.3 |
| 2026-10-07 |
WPSEC-2026-0602 |
Subscribe to Comments <= 2.3.2 - Authenticated (Subscriber+) Incorrect Authorization to Subscription Takeover via Unverified Account Email |
Medium 5.4 |
2.3.3 |
| 2026-10-07 |
WPSEC-2026-0601 |
Subscribe to Comments <= 2.3.2 - Unauthenticated Sensitive Information Exposure via E-mail Change Confirmation |
Medium 4.8 |
2.3.3 |
| 2026-10-07 |
WPSEC-2026-0600 |
Subscribe to Comments <= 2.3.2 - Cross-Site Request Forgery via Subscription Manager |
Medium 4.3 |
2.3.3 |
| 2026-10-07 |
WPSEC-2026-0590 |
Subscribe to Comments <= 2.3.1 - Authenticated (Author+) Missing Authorization to Plugin Settings Update |
Medium 6.4 |
2.3.2 |
| 2026-10-07 |
WPSEC-2026-0589 |
Subscribe to Comments <= 2.3.1 - Unauthenticated Sensitive Information Exposure via Subscription Management Keys |
Medium 6.5 |
2.3.2 |
| 2026-10-07 |
WPSEC-2026-0588 |
Subscribe to Comments <= 2.3.1 - Reflected Cross-Site Scripting via 'ref' Parameter |
Medium 6.1 |
2.3.2 |
