Critical · 9.8 CVE-2026-73364 EUVD-2026-62384GHSA-r5mm-45xf-59fx

WordPress Flexible Subscriptions plugin <= 1.8.1 - PHP Object Injection vulnerability

Published Aug 19, 2026 · Updated Aug 19, 2026 · Assigned by Patchstack

Vendor: WP Desk Product: Flexible Subscriptions

Description

Customer PHP Object Injection in Flexible Subscriptions <= 1.8.1 versions.

Affected products

Vendor	Product	Affected	Fixed
wpdesk	Flexible Subscriptions	≤ 1.8.1	—

References

https://patchstack.com/database/wordpress/plugin/flexible-subscriptions/vulnerability/wordpress-flexible-subscriptions-plugin-1-8-1-php-object-injection-vulnerability?_s_id=cve vdb-entry