Unrated severityNVD Advisory· Published Aug 7, 2026

CVE-2026-15214

Description

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its details, allowing any authenticated customer to read another customer's subscription information (the subscribed product, status, and dates) by supplying that subscription's ID.

Affected products

WordPress/Woocommerce Subscriptionsllm-fuzzy
Range: <2.0.1
Package: https://wordpress.org/plugins/woocommerce-subscriptions

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/d11cfec5-e1e6-4a01-84e2-4d42be1a72ac/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000