WordPress Vulnerability Scanner WPSec
Vulnerabilities / Subscription & Recurring Payment for WooCommerce

Subscription & Recurring Payment for WooCommerce vulnerabilities

Advisories WPSec published for Subscriptions for WooCommerce with Stripe Recurring Payments. Other sources may list more. Its attack surface: Subscription & Recurring Payment for WooCommerce on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-11-12 WPSEC-2026-2951 Subscription & Recurring Payment for WooCommerce <= 2.5.1 - Authenticated (Subscriber+) Payment Bypass via Subscription Reactivation Action Medium 4.3 2.5.2
2026-11-12 WPSEC-2026-2950 Subscription & Recurring Payment for WooCommerce <= 2.5.1 - Unauthenticated Payment Bypass via PayPal Return URL Medium 5.3 2.5.2
2026-11-12 WPSEC-2026-2949 Subscription & Recurring Payment for WooCommerce <= 2.5.1 - Unauthenticated Insecure Direct Object Reference via Guest Checkout Billing Email Low 3.7 2.5.2
2026-11-12 WPSEC-2026-2948 Subscription & Recurring Payment for WooCommerce <= 2.5.1 - Unauthenticated Server-Side Request Forgery via PayPal Webhook Certificate URL High 7.2 2.5.2
2026-11-12 WPSEC-2026-2947 Subscription & Recurring Payment for WooCommerce <= 2.5.1 - Authenticated (Subscriber+) Missing Authorization to WooCommerce Plugin Installation and Activation Medium 4.3 2.5.2

License: CC BY 4.0