[ CVE-2026-87856 · Published 5 Nov 2026 ]
Vulnerability in Unknown Subscriptions for WooCommerce
Not scored yet
No fix listed yet
[ Description ]Official description
The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on standard front-end page views, allowing unauthenticated users to read the full contents of restricted posts and pages through other routes that render the same content.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.