{
 "id": "WPSEC-2026-2592",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2592/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2592/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2592/index.md",
 "title": "YITH WooCommerce Subscription <= 4.22.0 - Unauthenticated Limited Information Exposure via REST API",
 "description": "The YITH WooCommerce Subscription plugin for WordPress is vulnerable to Limited Information Exposure via the WordPress REST API in all versions up to, and including, 4.22.0. This is due to the non-public subscription post type (ywsbs_subscription) being registered with 'show_in_rest' enabled while its records are stored with the 'publish' status, which made the core wp/v2 posts endpoints list and return them without a capability check. This makes it possible for unauthenticated attackers to enumerate subscription records and get their IDs, creation and modification dates, slugs and links, which shows how many subscriptions the store has and when they were created or changed.",
 "plugin": {
  "slug": "yith-woocommerce-subscription",
  "name": "YITH WooCommerce Subscription",
  "full_name": "YITH WooCommerce Subscription",
  "wordpress_org": "https://wordpress.org/plugins/yith-woocommerce-subscription/",
  "advisories_url": "https://wpsec.com/vuln/plugin/yith-woocommerce-subscription/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/yith-woocommerce-subscription"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": "2.0.0",
    "from_inclusive": true,
    "to": "4.23.0",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 2.0.0 before 4.23.0"
  ]
 },
 "introduced_in": "2.0.0",
 "fixed_in": "4.23.0",
 "remediation": "Update to 4.23.0 or later.",
 "fix_released": "2026-11-04T15:07:39+00:00",
 "published": "2026-11-05T15:48:17+00:00",
 "updated": "2026-11-05T09:52:16.582860+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2592/",
  "https://plugins.svn.wordpress.org/yith-woocommerce-subscription/tags/4.23.0/",
  "https://wordpress.org/plugins/yith-woocommerce-subscription/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/yith-woocommerce-subscription",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-11-05"
 }
}