Unknown Subscriptions for WooCommerce

2 known vulnerabilities in Unknown Subscriptions for WooCommerce, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-87860 CVSS 4.3 medium The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a…
CVE-2026-87854 CVSS 5.3 medium The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not correctly validate the shared secret protecting one of its REST…