← Back to CVE search

CVE-2026-24527

Autoship Cloud for WooCommerce Subscription Products

Description

Missing Authorization vulnerability in Patterns in the cloud Autoship Cloud for WooCommerce Subscription Products allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.14.0.

CVSS 4.3EPSS 0.2%Risk 0.44
View source
Published
2026-05-25 22:16:32
Affected versions
<=2.14.0
Type
Web application
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N