CVE-2006-10001

A vulnerability, which was classified as problematic, was found in Subscribe to Comments Plugin up to 2.0.7 on WordPress. This affects an unknown part of the file subscribe-to-comments.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The identifier of the patch is 9683bdf462fcac2f32b33be98f0b96497fbd1bb6. It is recommended to upgrade the affected component. The identifier VDB-222321 was assigned to this vulnerability.

• CWE-79

• https://github.com/wp-plugins/subscribe-to-comments/commit/9683bdf462fcac2f32b33be98f0b96497fbd1bb6Patch, Third Party Advisory
• https://github.com/wp-plugins/subscribe-to-comments/releases/tag/2.0.8Third Party Advisory
• https://vuldb.com/?ctiid.222321Permissions Required
• https://vuldb.com/?id.222321Permissions Required, Third Party Advisory
• https://github.com/wp-plugins/subscribe-to-comments/commit/9683bdf462fcac2f32b33be98f0b96497fbd1bb6Patch, Third Party Advisory
• https://github.com/wp-plugins/subscribe-to-comments/releases/tag/2.0.8Third Party Advisory
• https://vuldb.com/?ctiid.222321Permissions Required
• https://vuldb.com/?id.222321Permissions Required, Third Party Advisory

Published

Mar 5, 2023

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0995EMC Dantz Retrospect 7 backup client 7.0.107, and other vers…
• CVE-2006-0996Cross-site scripting (XSS) vulnerability in phpinfo (info.c)…
• CVE-2006-0997The SSL server implementation in NILE.NLM in Novell NetWare …
• CVE-2006-0998The SSL server implementation in NILE.NLM in Novell NetWare …
• CVE-2006-0999The SSL server implementation in NILE.NLM in Novell NetWare …
• CVE-2006-1000Multiple SQL injection vulnerabilities in Pentacle In-Out Bo…
• CVE-2006-10002XML::Parser versions through 2.45 for Perl could overflow th…7.5
• CVE-2006-10003XML::Parser versions through 2.47 for Perl has an off-by-one…9.8
• CVE-2006-1001SQL injection vulnerability in the board module in LanSuite …
• CVE-2006-1002NETGEAR WGT624 Wireless DSL router has a default account of …
• CVE-2006-1003The backup configuration option in NETGEAR WGT624 Wireless F…
• CVE-2006-1004Cross-site scripting (XSS) vulnerability in agencyprofile.as…