CVE-2026-91831 | Subscribe to Comments Plugin up to 2.3.2 on WordPress Notification Sender Name Setting sender-name crlf injection

October 19, 2026 Yanac

A vulnerability labeled as critical has been found in Subscribe to Comments Plugin up to 2.3.2 on WordPress. Affected is an unknown function of the component Notification Sender Name Setting. Executing a manipulation of the argument sender-name can lead to crlf injection.

This vulnerability appears as CVE-2026-91831. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More