CVE-2026-14926

The CVE concerns FluentCart (WordPress plugin) versions before 1.4.0. The vulnerability arises in several payment-method endpoints that do not verify subscription ownership, allowing any authenticated customer to act on another customer’s subscription (e.g., changing its payment method, or cancel...

CVE-2026-4058

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the usersubscriptioncancel function in all versions up to, and including, 4.3.2. Thi...

WordPress Paytium: Mollie payment forms & donations plugin <= 4.3.7 - Missing Authorization in 'pt_cancel_subscription' vulnerability

Missing Authorization in 'ptcancelsubscription' vulnerability discovered by WordFence in WordPress Plugin Paytium versions = 4.3.7...