CVE-2026-66706

The Subscribe to Comments plugin versions up to 2.3.1 are vulnerable to a Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability can lead to unauthorized actions or data exposure, particularly affecting users who interact with the comments section. Website administrators using this plugin should prioritize patching or updating to mitigate potential exploitation.