Advisories · Technology
wpswings Subscriptions for WooCommerce.
Every CVE that names wpswings Subscriptions for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Subscriptions for WooCommerce <= 2.0.0 - Authenticated (Contributor+) Privilege Escalation via '_wps_plan_user_role' Membership Plan Meta
- wpswings Subscriptions for WooCommerce
- Privilege escalation
- CVSS 7.2 High
Subscriptions for WooCommerce <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configuration AJAX Action
- wpswings Subscriptions for WooCommerce
- Broken access control
- CVSS 5.3 Medium
Subscriptions for WooCommerce <= 1.9.2 - Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation
- wpswings Subscriptions for WooCommerce
- Broken access control