CVE-2026-116528
Chargely Free Subscriptions <= 1.0 - Unauthenticated WooCommerce REST API Credential Disclosure
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Chargely Free Subscriptions For Woocommernce WordPress plugin through 1.0 does not perform any authorization check on a REST API route that returns its stored configuration, allowing unauthenticated attackers to retrieve the live WooCommerce REST API consumer key and secret it holds, which grant read and write access to the whole store.
| Vendor | unknown |
| Product | chargely free subscriptions for woocommernce |
| Published | Nov 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown chargely free subscriptions for woocommernce
Be the first to know when new unknown vulnerabilities affecting unknown chargely free subscriptions for woocommernce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Chargely Free Subscriptions For Woocommernce
0 ≤ 1.0
References
Credits
Naoki Kawahigashi WPScan