Skip to content
Sign in
3.8 Low

CVE-2026-91831 The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification…

Description

The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allowing users with Author-level access and above to inject arbitrary e-mail headers, such as a hidden Bcc, and to spoof the sender.

Affected products and versions

Product Affected versions Fixed in
Subscribe to Comments 2.3 2.3 → < 2.3.3 2.3.3

Other CVEs of Subscribe to Comments

The 3 CVEs of Subscribe to Comments →
CVE-2026-91830 The Subscribe to Comments WordPress plugin before 2.3.3 does not sign or validate a cookie it trusts to identify a… 6.5 Medium CVE-2026-91829 The Subscribe to Comments WordPress plugin before 2.3.3 does not properly validate a parameter before reflecting it into… 7.1 High
Track this CVE