Advisories · Technology
Subscriptions for WooCommerce.
Every CVE that names Subscriptions for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass
- Subscriptions for WooCommerce
- Broken access control
- CVSS 4.3 Medium
Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRF
- Subscriptions for WooCommerce
- Broken access control
- CVSS 5.3 Medium
Subscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key Bypass
- Subscriptions for WooCommerce
- Information disclosure
- CVSS 5.9 Medium
Subscriptions for WooCommerce < 2.0.1 - Payment Bypass via Attacker-Supplied PayPal Capture Token
- Subscriptions for WooCommerce
- CWE-345
- CVSS 8.8 High
Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation
- Subscriptions for WooCommerce
- Privilege escalation
- CVSS 4.3 Medium
Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR
- Subscriptions for WooCommerce
- Broken access control