{"items":[{"id":"CVE-2025-26878","published":"2025-02-25T14:17:51.390Z","updated":"2026-04-28T16:11:41.209Z","title":"WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.8.0.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"patternsinthecloud","product":"Autoship Cloud for WooCommerce Subscription Products","kev":false,"epss":0.0028,"kevAdded":null,"exploit":false},{"id":"CVE-2024-13461","published":"2025-02-21T09:21:05.066Z","updated":"2026-04-08T16:34:45.533Z","title":"Autoship Cloud for WooCommerce Subscription Products <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"patternsinthecloud","product":"Autoship Cloud for WooCommerce Subscription Products","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false}]}