MEDIUM 4.3 NVD

CVE-2026-15214

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its detai

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its details, allowing any authenticated customer to read another customer's subscription information (the subscribed product, status, and dates) by supplying that subscription's ID.

References

https://wpscan.com/vulnerability/d11cfec5-e1e6-4a01-84e2-4d42be1a72ac/

Published: 2026-08-07 · Source: NVD · Feed updated: 2026-08-10

This medium severity vulnerability with a CVSS score of 4.3 was published on 2026-08-07 via NVD.

vulnfeed aggregates 8893 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.