WordPress plugin

Autoship Cloud for WooCommerce Subscription Products security & vulnerabilities

Q: Is any Autoship Cloud for WooCommerce Subscription Products vulnerability listed in CISA KEV?

No. None of the known Autoship Cloud for WooCommerce Subscription Products vulnerabilities is currently listed in the CISA KEV catalog.

autoship-cloud— active installsLast vulnerability Oct 5, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

4Known vulnerabilities

Critical0
High0
Medium4
Low0

Vulnerabilities per year

All Autoship Cloud for WooCommerce Subscription Products vulnerabilities

Autoship Cloud for WooCommerce Subscription Products vulnerabilities
Severity	Vulnerability	CVE	Published
Medium5.3	Missing Authorization ≤2.17.1No patch available	CVE-2026-39762	Oct 05
Medium4.3	Missing Authorization ≤2.14.3Update to 2.14.4	CVE-2026-24527	May 25
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.8.0.1Update to 2.8.1	CVE-2025-26878	Feb 22, 2025
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.8.0Update to 2.8.1	CVE-2024-13461	Feb 20, 2025

Medium5.3
Missing Authorization
≤2.17.1No patch available
CVE-2026-39762Oct 05
Medium4.3
Missing Authorization
≤2.14.3Update to 2.14.4
CVE-2026-24527May 25
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.8.0.1Update to 2.8.1
CVE-2025-26878Feb 22, 2025
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.8.0Update to 2.8.1
CVE-2024-13461Feb 20, 2025

Autoship Cloud for WooCommerce Subscription Products: common questions

Does Autoship Cloud for WooCommerce Subscription Products have known vulnerabilities?

Yes. VulnCrest Radar lists 4 known vulnerabilities in Autoship Cloud for WooCommerce Subscription Products: 4 medium. At least one is not fixed in the latest version.

How do I check which version of Autoship Cloud for WooCommerce Subscription Products I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Autoship Cloud for WooCommerce Subscription Products vulnerability?

CVE-2026-39762, published Oct 5, 2026: Autoship Cloud for WooCommerce Subscription Products <= 2.17.1 - Missing Authorization. Severity: Medium (CVSS 5.3).

Is any Autoship Cloud for WooCommerce Subscription Products vulnerability listed in CISA KEV?

No. None of the known Autoship Cloud for WooCommerce Subscription Products vulnerabilities is currently listed in the CISA KEV catalog.