Threats tagged 'ghsa-qhjm-7mgh-6mhm'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-15214Subscriptions for WooCommerce (WordPress plugin) · Insecure Direct Object Reference Medium4.3EPSS 0.3%2026-08-07CVE Database V5CVE-2026-15214 A vulnerability in the Subscriptions for WooCommerce WordPress plugin before version 2.0.1 allows any authenticated customer to view another customer's subscription details by supplying the subscription ID. The plugin does not verify ownership of the subscription before displaying its information. EPSS 0.3%Vulnerability CWE-639 #ghsa-qhjm-7mgh-6mhm	CVE Database V5	2026-08-07

Page 1 of 1