{"cvss":9.8,"datePublished":"2026-10-13T00:00:00Z","dateUpdated":"2026-10-13T00:00:00Z","description":"The WooCommerce Subscriptions WordPress plugin before 9.1.0 does not validate user input before unserializing it on stores with High-Performance Order Storage enabled, leading to a PHP Object Injection issue which unauthenticated users can escalate to Remote Code Execution via a gadget chain present in the bundled dependencies.","dueDate":"","id":"CVE-2026-18391","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"WooCommerce Subscriptions","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"  Unrestricted Upload of File with Dangerous Type","vendor":"WooCommerce"}