CVE-2026-87860 – The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the securi

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making.