CVE-2026-15215

The CVE-2026-15215 issue affects the Subscriptions for WooCommerce WordPress plugin prior to 2.0.1. An attacker with Shop Manager privileges can exploit a nonce‑protected AJAX action that installs and activates a Subscriptions for WooCommerce plugin from a user-supplied slug without proper capabi...