CVE-2026-103422 | ateshabaev AnyComment Plugin up to 0.3.6 on WordPress Subscriptions subscribe column_default email cross site scripting

SecurityVulns
Yanac

A vulnerability labeled as problematic has been found in ateshabaev AnyComment Plugin up to 0.3.6 on WordPress. This impacts the function AnyCommentSubscriptionsTable::column_default of the file /wp-json/anycomment/v1/subscribe of the component Subscriptions. Such manipulation of the argument email leads to cross site scripting.

This vulnerability is listed as CVE-2026-103422. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More