WooCommerce Subscriptions vulnerabilities
We track 1 vulnerability in WooCommerce Subscriptions products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 12, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest WooCommerce Subscriptions vulnerabilities
- 9.8 Critical severity
WooCommerce Subscriptions: Unrestricted Upload of File with Dangerous Type
The WooCommerce Subscriptions WordPress plugin before 9.1.0 does not validate user input before unserializing it on stores with High-Performance Order Storage enabled, leading to a PHP Object Injection issue which unauthenticated users can escalate to Remote C