{"affected":[{"defaultStatus":"unaffected","product":"Subscriptions for WooCommerce","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"2.1.1","status":"affected","version":"2.0.0","versionType":"semver"}]}],"cveId":"CVE-2026-87856","cwes":["CWE-284"],"description":"The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on standard front-end page views, allowing unauthenticated users to read the full contents of restricted posts and pages through other routes that render the same content.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/cbb00245-1e9b-4311-a4d0-ae80488e82d0/"}],"kev":null,"metrics":[],"modifiedAt":1793858425037,"publishedAt":1793858425037,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/cbb00245-1e9b-4311-a4d0-ae80488e82d0/"}],"remediation":[],"revision":"22b18c9b282dee68f42352b93ea3937532fbf68f0c2587a6eab93083d1a633f3","sources":[{"modifiedAt":1793858425037,"name":"CNA: WPScan","retrievedAt":1793859014068,"url":"https://www.cve.org/CVERecord?id=CVE-2026-87856"}],"ssvc":null,"status":"published","title":"Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass","updatedAt":1793859014068}