Subscriptions for WooCommerce vulnerabilities

2 known vulnerabilities in Subscriptions for WooCommerce from Wpswings. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Subscriptions for WooCommerce: Improper Privilege Management

  CVE-2026-15414Aug 1, 2026Wpswings

  The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0. This is due to the `save_meta_boxes()` function persisting the `_wps_plan_user_role` membership plan meta from `$_POST` withou

• 7.2 High severity

  Subscriptions for WooCommerce: Missing Authorization

  CVE-2026-15397Jul 30, 2026Wpswings

  The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to the plugin not properly verifying that a user is authorized to perform an action via the wps_sfw_install_p