WordPress security by component

Recurio – Ultimate Subscription for WooCommerce

Plugin description

Recurio – Ultimate Subscription for WooCommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 08, 2026; the highest CVE/CNA score is 4.9.

Plugin slug: recurio

Latest vulnerability

CVE-2026-12936: Recurio – Ultimate Subscription for WooCommerce: SQL injection

Recurio – Ultimate Subscription for WooCommerce is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 1.1.3.

PublishedJul 08, 2026

Known safe version> 1.1.3

		Safe version
Jul 08, 2026	CVE-2026-12936 Recurio – Ultimate Subscription for WooCommerce: SQL injection Recurio – Ultimate Subscription for WooCommerce is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 1.1.3.	> 1.1.3	CVE4.9 NVDPending