Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:39:46 +0000 CVE-2026-15214 — Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR https://db.gcve.eu/vuln/cve-2026-15214 <p><strong>Affected:</strong> Unknown Subscriptions for WooCommerce</p> <p>The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its details, allowing any authenticated customer to read another customer&#39;s subscription information (the subscribed product, status, and dates) by supplying that subscription&#39;s ID.</p> <p><strong>Affected:</strong> Unknown Subscriptions for WooCommerce</p> <p>The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its details, allowing any authenticated customer to read another customer&#39;s subscription information (the subscribed product, status, and dates) by supplying that subscription&#39;s ID.</p> https://db.gcve.eu/vuln/cve-2026-15214