WPSwings Subscriptions for WooCommerce

• CVE-2026-15414 High 8.8 Subscriptions for WooCommerce <= 2.0.0 - Authenticated (Contributor+) Privilege Escalation via '_wps_plan_user_role' Membership Plan Meta 0.8%
• CVE-2026-15397 High 7.2 Subscriptions for WooCommerce <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configuration AJAX Action 0.6%
• CVE-2026-1926 Medium 5.3 Subscriptions for WooCommerce <= 1.9.2 - Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation 0.3%