https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:28:59.455668+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-308595 EUVD-2026-308595 2026-10-06T01:28:59.504969+00:00 EUVD-2026-308595 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4409 fkie_cve-2026-4409 2026-10-06T01:28:59.505003+00:00

The Subscribe To Comments Reloaded plugin for WordPress is vulnerable to unauthorized modification of data due to a leaked secret key and usage of a weak hash generation algorithm in all versions up to, and including, 240119. This makes it possible for unauthenticated attackers to extract the global key from any public post page, forge authorization keys and manage comment subscription preferences for arbitrary users

 https://cve.radiocsirt.org/vuln/ghsa-gwh7-h25p-fjxv GHSA-gwh7-h25p-fjxv 2026-10-06T01:28:59.505037+00:00

The Subscribe To Comments Reloaded plugin for WordPress is vulnerable to unauthorized modification of data due to a leaked secret key and usage of a weak hash generation algorithm in all versions up to, and including, 240119. This makes it possible for unauthenticated attackers to extract the global key from any public post page, forge authorization keys and manage comment subscription preferences for arbitrary users