Medium · 4.3 CVE-2026-24527 EUVD-2026-31758GHSA-249v-wcw9-x5fj

WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.14.0 - Broken Access Control vulnerability

Published May 25, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Vendor: Patterns in the cloud Product: Autoship Cloud for WooCommerce Subscription Products Category: Web / CMS

Description

Missing Authorization vulnerability in Patterns in the cloud Autoship Cloud for WooCommerce Subscription Products allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.14.0.

Affected products

Vendor	Product	Affected	Fixed
Patterns in the cloud	Autoship Cloud for WooCommerce Subscription Products	≤ 2.14.0	—

References

https://patchstack.com/database/wordpress/plugin/autoship-cloud/vulnerability/wordpress-autoship-cloud-for-woocommerce-subscription-products-plugin-2-14-0-broken-access-control-vulnerability?_s_id=cve vdb-entry