CVE-2026-15214

The CVE-2026-15214 entry affects the WooCommerce Subscriptions plugin for WordPress (pre-2.0.1). The vulnerability is an IDOR: an authenticated user can view another customer’s subscription details (subscribed product, status, dates) because the plugin does not verify ownership before rendering t...