Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Subscriptions for WooCommerce 2.0.3 Clear all filters
TI-2026-59957 CVE-2026-87860 · GHSA-4q57-7phr-hqc4

Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRF

Priority LOW 19

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subsc…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00168 Published 2026-09-16 Fixed in 2.0.3 CWE-862
TI-2026-59954 CVE-2026-87854 · GHSA-mp62-wj23-fc7f

Subscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key Bypass

Priority LOW 30

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not correctly validate the shared secret protecting one of its REST endpoints, allowing unauthenticated users to retrieve the store's full list of subs…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00345 Published 2026-09-16 Fixed in 2.0.3 CWE-200