CVE-2026-15214

UNKNOWN 0.0

Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its details, allowing any authenticated customer to read another customer's subscription information (the subscribed product, status, and dates) by supplying that subscription's ID.

Vendor	unknown
Product	subscriptions for woocommerce
Published	Aug 7, 2026

Stay Ahead of the Next One

Get instant alerts for unknown subscriptions for woocommerce

Be the first to know when new unknown vulnerabilities affecting unknown subscriptions for woocommerce are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Subscriptions for WooCommerce

0 < 2.0.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/d11cfec5-e1e6-4a01-84e2-4d42be1a72ac/

Credits

Muni Nitish Kumar Yaddala WPScan