{"cve":"CVE-2026-87856","enrichment":{"created":"2026-11-05T07:30:14.788493+00:00","updated":"2026-11-05T07:30:14.788498+00:00","vendors":[],"weaknesses":["CWE-284"]},"mitre":{"cpes":[],"created":"2026-11-05T06:00:25.037000+00:00","description":"The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on standard front-end page views, allowing unauthenticated users to read the full contents of restricted posts and pages through other routes that render the same content.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2026/87xxx/CVE-2026-87856.json","references":["https://wpscan.com/vulnerability/cbb00245-1e9b-4311-a4d0-ae80488e82d0/"],"title":"Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass","updated":"2026-11-05T06:00:25.037000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":[],"created":"2026-11-05T06:17:09.367000+00:00","description":"The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on standard front-end page views, allowing unauthenticated users to read the full contents of restricted posts and pages through other routes that render the same content.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"nvd_repo_path":"2026/CVE-2026-87856.json","references":["https://wpscan.com/vulnerability/cbb00245-1e9b-4311-a4d0-ae80488e82d0/"],"title":null,"updated":"2026-11-05T06:17:09.503000+00:00","vendors":[],"weaknesses":[]},"opencve":{"changes":[{"created":"2026-11-05T06:15:00+00:00","data":[{"details":{"new":"The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on standard front-end page views, allowing unauthenticated users to read the full contents of restricted posts and pages through other routes that render the same content.","old":null},"type":"description"},{"details":{"new":"Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass","old":null},"type":"title"},{"details":{"added":["https://wpscan.com/vulnerability/cbb00245-1e9b-4311-a4d0-ae80488e82d0/"],"removed":[]},"type":"references"}],"id":"958a585d-c271-43f6-9182-ef5cac73a10f"},{"created":"2026-11-05T07:45:00+00:00","data":[{"details":{"added":["CWE-284"],"removed":[]},"type":"weaknesses"}],"id":"30b13146-6506-405b-a08c-3c3d19a10942"}],"cpes":{"data":[],"providers":[]},"created":{"data":"2026-11-05T06:00:25.037000+00:00","provider":"mitre"},"description":{"data":"The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on standard front-end page views, allowing unauthenticated users to read the full contents of restricted posts and pages through other routes that render the same content.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{},"provider":null},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{},"provider":null},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://wpscan.com/vulnerability/cbb00245-1e9b-4311-a4d0-ae80488e82d0/"],"providers":["mitre","nvd"]},"title":{"data":"Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass","provider":"mitre"},"updated":{"data":"2026-11-05T07:30:14.788498+00:00","provider":"enrichment"},"vendors":{"data":[],"providers":[]},"weaknesses":{"data":["CWE-284"],"providers":["enrichment"]}}}