Approved changes feed: RSS · Atom

cpe:2.3:a:automattic:woocommerce_subscriptions:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorAutomattic (1dc39c9b-4ddb-5af6-acf4-410b436129a9)
ProductWoocommerce Subscriptions (a413a380-513b-59be-b75e-3fc82c318feb)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/automattic/woocommerce-subscriptions-core purl2cpe 2026-06-01 10:14:43.063118

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-35914 vulnerable 2026-06-03 14:52:19.245323 WordPress WooCommerce Subscriptions Plugin <= 5.1.2 is vulnerable to Insecure Direct Object References (IDOR)
HIGH (7.5)
Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Woo Subscriptions.This issue affects Woo Subscriptions: from n/a through 5.1.2.
Published: 2023-12-20T15:18:16.247Z
Updated: 2026-04-28T16:08:30.759Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.