CVE-2026-39762: WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.17.0 - Broken Access Control vulnerability
Published Oct 6, 2026
·Updated
Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1.
Other sources
Unauthenticated Broken Access Control in Autoship Cloud for WooCommerce Subscription Products <= 2.17.0 versions.
— MITRE
Affected Software
1 affected component
Patterns in the Cloud Autoship Cloud for WooCommerce Subscription Products<=2.17.0
Event History
Oct 6, 2026
CVE Published
via MITRE·08:34 AM
Data Sourced
via MITRE·08:34 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness