Log out
Get PRO

Latest

Input validation vulnerability in WooCommerce Subscription 4.6.0

  • Severity: medium-risk
  • Status: Fixed
  • Publication: September 11, 2023

The WooCommerce Subscription plugin for WordPress has a security vulnerability in versions up to 4.6.0. This vulnerability allows an unauthenticated attacker to make changes to subscriptions on the site, as long as they can trick an administrator into clicking on a malicious link. The vulnerability is caused by the lack of proper validation when suspending or canceling subscriptions.

Detected in:

WooCommerce Subscription fixed vulnerable versions: >= * < 4.6.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.