Advisories · Technology

WooCommerce Subscriptions.

Every CVE that names WooCommerce Subscriptions among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18391 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection
- WooCommerce Subscriptions
- Unrestricted file upload
Not analysed yet 12 Aug 2026
CVE-2023-50850 CVE record

CVSS 4.3 Medium

WordPress Woo Subscriptions plugin < 5.8.0 - Broken Access Control vulnerability
- WooCommerce Subscriptions
- Broken access control
Not analysed yet 31 Dec 2024