<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: subscribe to comments reloaded</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-31249: Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This i</title><link>https://patchthecve.com/cve/CVE-2024-31249.html</link><guid>https://patchthecve.com/cve/CVE-2024-31249.html</guid><pubDate>Wed, 12 Aug 2026 18:17:21 +0000</pubDate><description>MEDIUM 5.3: Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725.</description></item><item><title>CVE-2022-29414: Multiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube&#x27;s Subscribe To Comments Reloaded pl</title><link>https://patchthecve.com/cve/CVE-2022-29414.html</link><guid>https://patchthecve.com/cve/CVE-2022-29414.html</guid><pubDate>Wed, 17 Jun 2026 04:40:08 +0000</pubDate><description>MEDIUM 5.4: Multiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube&#x27;s Subscribe To Comments Reloaded plugin &lt;= 211130 on WordPress allows attackers to clean up Log archive, download system info file, plugin system settings, plugin options settings, generate a new key, reset all options, chang</description></item><item><title>CVE-2014-2274: Cross-site request forgery (CSRF) vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for</title><link>https://patchthecve.com/cve/CVE-2014-2274.html</link><guid>https://patchthecve.com/cve/CVE-2014-2274.html</guid><pubDate>Wed, 17 Jun 2026 00:06:19 +0000</pubDate><description>HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via a request to the subscribe-to-comments-relo</description></item></channel></rss>