Beveiligingsadvies

CVE-2026-87854

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 06:00:16

Laatst bijgewerkt 2026-09-17 12:33:12

Toegewezen door WPScan

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not correctly validate the shared secret protecting one of its REST endpoints, allowing unauthenticated users to retrieve the store's full list of subscriptions, including customer usernames, product names, recurring amounts and payment dates.

← Alle CVE's bekijken Bekijk op cve.org ↗