Skip to contentWp Swings Subscriptions For Woocommerce vulnerabilities
- unknown subscriptions for woocommerceSubscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction BypassCVE-2026-878565.3 Medium
- unknown subscriptions for woocommerceSubscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRFCVE-2026-878604.3 Medium
- unknown subscriptions for woocommerceSubscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key BypassCVE-2026-878545.3 Medium
- unknown subscriptions for woocommerceSubscriptions for WooCommerce < 2.0.1 - Payment Bypass via Attacker-Supplied PayPal Capture TokenCVE-2026-152115.9 Medium
- unknown subscriptions for woocommerceSubscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin InstallationCVE-2026-152158.8 High
- unknown subscriptions for woocommerceSubscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDORCVE-2026-152144.3 Medium
- wp swings subscriptions for woocommerceSubscriptions for WooCommerce <= 2.0.0 - Authenticated (Contributor+) Privilege Escalation via '_wps_plan_user_role' Membership Plan MetaCVE-2026-154148.8 High
- wp swings subscriptions for woocommerceSubscriptions for WooCommerce <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configuration AJAX ActionCVE-2026-153977.2 High
- wp swings subscriptions for woocommerceWordPress Subscriptions for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerabilityCVE-2026-560617.5 High
- wp swings subscriptions for woocommerceWordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerabilityCVE-2026-243727.5 High
- wp swings subscriptions for woocommerceSubscriptions for WooCommerce <= 1.9.2 - Missing Authorization to Unauthenticated Arbitrary Subscription CancellationCVE-2026-19265.3 Medium