What’s Vulnerable › Products

wpswings Subscriptions for WooCommerce vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your wpswings Subscriptions for WooCommerce version is affected

Latest wpswings Subscriptions for WooCommerce vulnerabilities

• CVE-2026-15414 — Subscriptions for WooCommerce <= 2.0.0 - Authenticated (Contributor+) Privilege Escalation via '_wps_plan_user_role' Membership Plan Meta (CVSS 8.8)
• CVE-2026-15397 — Subscriptions for WooCommerce <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configuration AJAX Action (CVSS 7.2)
• CVE-2026-56061 — WordPress Subscriptions for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability (CVSS 7.5)
• CVE-2026-24372 — WordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerability (CVSS 7.5)
• CVE-2026-1926 — Subscriptions for WooCommerce <= 1.9.2 - Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation (CVSS 5.3)