https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:32:38.526369+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349407 EUVD-2026-349407 2026-10-09T06:32:38.558963+00:00 EUVD-2026-349407 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15214 fkie_cve-2026-15214 2026-10-09T06:32:38.559014+00:00

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its details, allowing any authenticated customer to read another customer's subscription information (the subscribed product, status, and dates) by supplying that subscription's ID.

 https://cve.radiocsirt.org/vuln/ghsa-qhjm-7mgh-6mhm GHSA-qhjm-7mgh-6mhm 2026-10-09T06:32:38.559052+00:00

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its details, allowing any authenticated customer to read another customer's subscription information (the subscribed product, status, and dates) by supplying that subscription's ID.