CVE-2026-73364

The vulnerability affects Flexible Subscriptions versions up to and including 1.8.1, allowing for PHP Object Injection, which can lead to remote code execution. This critical flaw poses a significant risk to any systems utilizing the affected versions, potentially compromising sensitive data and system integrity. Organizations using Flexible Subscriptions should prioritize immediate updates to mitigate this severe threat.