CVE-2026-18391 | WooCommerce Subscriptions Plugin up to 9.0.x on WordPress code injection

August 12, 2026 Yanac

A vulnerability described as critical has been identified in WooCommerce Subscriptions Plugin up to 9.0.x on WordPress. This affects an unknown function. Such manipulation leads to code injection.

This vulnerability is documented as CVE-2026-18391. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More