EUVD-2026-66884

The Notifima WordPress plugin before 3.1.4 does not verify that the caller owns the subscription being modified on one of its REST endpoints in all versions up to, and including, 3.1.3, allowing authenticated attackers with Subscriber-level access to unsubscribe arbitrary customers from product...

CVE-2026-78139

The Notifima WordPress plugin , in versions up to and including 3.1.3 , fails to verify that the caller owns the subscription being modified on one of its REST endpoints. This allows authenticated attackers with Subscriber-level access to unsubscribe arbitrary customers from product stock-alert n...

WordPress Notifima plugin < 3.1.4 - Subscriber+ Stock Alert Unsubscription vulnerability

Subscriber+ Stock Alert Unsubscription vulnerability discovered by Shikhali Jamalzade in WordPress Plugin WooCommerce Product Stock Alert versions 3.1.4...