CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Authentication Bypass by Spoofing vulnerability in WP Swings Subscriptions for WooCommerce subscriptions-for-woocommerce allows Input Data Manipulation.This issue affects Subscriptions for WooCommerce: from n/a through <= 1.8.10.
Explanation of Vulnerability in Simple Terms
Subscriptions for WooCommerce versions up to 1.8.10 contain an authentication bypass vulnerability. An attacker can modify subscription data or perform unauthorized actions without valid credentials. The vulnerability requires no user interaction and is remotely exploitable. Site administrators should update to a version newer than 1.8.10 immediately.
What an attacker can do
Modify or tamper with subscription data and settings without authentication.
Potential impact on your site
Attackers can alter customer subscriptions, billing, or plugin settings without logging in.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
