https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T14:35:03.210569+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-15215 CVE-2026-15215 — Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation 2026-09-28T14:35:03.212489+00:00

Affected: Unknown Subscriptions for WooCommerce

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify the user's capability before installing and activating a Subscriptions for WooCommerce WordPress plugin before 2.0.1 from a user-supplied slug through a nonce-protected AJAX action, allowing users with the Shop Manager role (who lack Subscriptions for WooCommerce WordPress plugin before 2.0.1-management capabilities) to install and activate arbitrary Subscriptions for WooCommerce WordPress plugin before 2.0.1, resulting in remote code execution.