Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

Subscribe to Comments · Version history

Subscribe to Comments changelog and version history

Latest version
2.3.3
Oct 6, 2026 (1 month ago)
Releases
16
since 2005
In the last year
2
about one every 0 days
Tested up to
WordPress 7.1.4
PHP 7.4 or later

Releases each year

  • 20055 releases
  • 20064 releases
  • 20072 releases
  • 20121 release
  • 20151 release
  • 20241 release
  • 20262 releases

20262 releases

  1. Subscribe to Comments 2.3.3Latest

    • Security: Verify email changes through the destination inbox before transferring subscriptions or revealing its management key. Confirmation links are purpose-bound, expire after one day, and cannot be replayed after use.
    • Security: Rotate management keys again to revoke links that could have been exposed by the email-change flow. Retired keys remain recognizable but never authorize access. Subscriptions and existing settings are preserved.
    • Security: Protect migration markers with a server-secret signature so old author-accessible settings cannot preserve a known key salt.
    • Honor double opt-in for standalone subscriptions and require fresh inbox confirmation for guest subscriptions, including addresses already subscribed elsewhere. Limit confirmation emails to one per address per day.
    • Preserve valid percent and apostrophe characters in subscriber email addresses, and make unsubscribe controls work immediately after confirmation.
    • Restrict custom layout includes to active-theme PHP files, prevent management-page referrer disclosure, and disable caching of private management pages.
    • Do not trust self-edited WordPress profile email addresses as proof of inbox ownership. Non-administrators manage subscriptions through emailed links.
    • Pause email-only notifications when posts become private, unpublished, or password-protected. Preserve subscriptions and hide nonpublic post titles from unauthorized management-page viewers.
    • Thanks to Het Kalariya for reporting the original vulnerabilities.
    • Improve modern PHP compatibility and initialize the plugin after WordPress APIs and translations are available.
    • Restore notifications for modern WordPress comment types and fix double opt-in, email-change, and unblock flows.
    • Protect subscription-manager and standalone-subscription forms with nonces, including administrator requests.
    • Validate malformed form values and disallow standalone subscriptions to unpublished, password-protected, or closed posts.
    • Escape frontend and administrator output, restrict form markup, and prepare SQL identifiers and limits.
    • Require WordPress 6.2 or later for prepared SQL identifier support, and PHP 7.4 or later. Tested on WordPress 7.1.

  2. Subscribe to Comments 2.3.2

    • Security: Stop using unsigned comment-email cookies to identify subscribers or disclose their management keys, and prevent key disclosure when subscribing without commenting.
    • Security: Validate and escape subscription-manager return links to prevent reflected cross-site scripting.
    • Security: Restrict plugin settings to administrators and sanitize notification sender headers to prevent email header injection.
    • Security: Rotate subscription-management keys once on existing installations. Old management and confirmation links are revoked, with an explanatory message and an administrator notice. Existing subscriptions are preserved, and new emails contain fresh links.
    • Preserve private key settings when saving plugin options so links remain valid and the security rotation is not repeated.
    • Guest subscribers manage subscriptions through emailed links. Subscribing without commenting now shows confirmation on the current page instead of redirecting to the subscription manager.
    • Thanks to Het Kalariya for reporting these vulnerabilities.

20241 release

  1. Subscribe to Comments 2.3.1

20151 release

  1. Subscribe to Comments 2.3

20121 release

  1. Subscribe to Comments 2.1.2

20072 releases

  1. Subscribe to Comments 2.1.1

  2. Subscribe to Comments 2.1

20064 releases

  1. Subscribe to Comments 2.0.8

  2. Subscribe to Comments 2.0.7

  3. Subscribe to Comments 2.0.6

  4. Subscribe to Comments 2.0.4

20055 releases

  1. Subscribe to Comments 2.0-beta-2

  2. Subscribe to Comments 2.0-beta-1

  3. Subscribe to Comments 2.0.2

  4. Subscribe to Comments 2.0.1

  5. Subscribe to Comments 2.0

Questions about Subscribe to Comments’s releases

What is the latest version of Subscribe to Comments?

2.3.3, released on Oct 6, 2026 (1 month ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.

How often is Subscribe to Comments updated?

2 releases in the last year, about one every 0 days. Its first release on WordPress.org dates from July 2005.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in Subscribe to Comments’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.