← Voltar à pesquisa de CVEs

CVE-2026-24527

Autoship Cloud for WooCommerce Subscription Products

Descrição

Missing Authorization vulnerability in Patterns in the cloud Autoship Cloud for WooCommerce Subscription Products allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.14.0.

CVSS 4.3EPSS 0.2%Risco 0.44
Ver fonte
Publicação
2026-05-25 22:16:32
Versões afetadas
<=2.14.0
Tipo
Aplicação web
Vetor
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N