PT-2026-52768 · WordPress · Woocommerce Subscriptions

·

CVE-2026-56061

·

Published

2026-06-26

·

Updated

2026-06-29

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Subscriptions for WooCommerce versions prior to 1.9.6
Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions.
Recommendations Update to a version newer than 1.9.5.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-56061

Affected Products

Woocommerce Subscriptions