ghsa-fwc3-9w8p-52wp

github
Description

The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on standard front-end page views, allowing unauthenticated users to read the full contents of restricted posts and pages through other routes that render the same content.

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References
Linked Vulnerabilities

No linked vulnerabilities found.

{
  "affected": [],
  "aliases": [
    "CVE-2026-87856"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-11-05T06:17:09Z",
    "severity": null
  },
  "details": "The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on standard front-end page views, allowing unauthenticated users to read the full contents of restricted posts and pages through other routes that render the same content.",
  "id": "GHSA-fwc3-9w8p-52wp",
  "modified": "2026-11-05T06:34:38Z",
  "published": "2026-11-05T06:34:38Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87856"
    },
    {
      "type": "WEB",
      "url": "https://wpscan.com/vulnerability/cbb00245-1e9b-4311-a4d0-ae80488e82d0"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}
View JSON API Download JSON