CyberRota Analysis
AI-GeneratedThe Subscriptions for WooCommerce plugin for WordPress versions prior to 2.0.1 is vulnerable due to inadequate verification of subscription ownership, enabling authenticated users to access and view details of other customers' subscriptions, including product information and status. This exposure could lead to unauthorized disclosure of sensitive customer data. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its details, allowing any authenticated customer to read another customer's subscription information (the subscribed product, status, and dates) by supplying that subscription's ID.