CVE-2026-15414: Privilege Escalation in Subscriptions for WooCommerce Plugin
The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to 2.0.0. An authenticated attacker with Contributor-level access can exploit this vulnerability to escalate their privileges to Administrator. Successful exploitation requires the Subscriptions for WooCommerce Pro companion plugin to be active.