VULNERABILITY INTELLIGENCE

CVE-2026-24527

CVSS score4.3 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-05-25
Last modified2026-07-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Description

Missing Authorization vulnerability in Patterns in the cloud Autoship Cloud for WooCommerce Subscription Products allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.14.0.

Weakness classification

  • audit@patchstack.com: CWE-862

Primary references