What’s Vulnerable › Products

Subscriptions for WooCommerce vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Subscriptions for WooCommerce version is affected

Latest Subscriptions for WooCommerce vulnerabilities

• CVE-2026-87860 — Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRF (CVSS 4.3)
• CVE-2026-87854 — Subscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key Bypass (CVSS 5.3)
• CVE-2026-15211 — Subscriptions for WooCommerce < 2.0.1 - Payment Bypass via Attacker-Supplied PayPal Capture Token (CVSS 5.9)
• CVE-2026-15215 — Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation (CVSS 8.8)
• CVE-2026-15214 — Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR (CVSS 4.3)