Subaccounts for WooCommerce

Subaccounts for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Subaccounts for WooCommerce has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Subaccounts for WooCommerce is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSHigh
7.5/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Subaccounts for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2025-47461

Subaccounts for WooCommerce <= 1.6.6 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

Read the full analysis

Vulnerability Records

2 records
Subaccounts for WooCommerce banner
Latestv2.0.1.1

Subaccounts for WooCommerce

mediaticus

Author

mediaticus

5.0(27)
100/100
Last Updated
2026-08-30 (13d ago)
Active Installs
200+
Downloads
14,054
Requires WP
5.7+
Requires PHP
5.7+
Tested up to
WP 7.1
Created
2022-06-24 (4y ago)

Easily allow customers to create subaccounts or add users to their company accounts, while giving them full control over subaccount details, order tracking, and purchase monitoring—all delivered through a powerful, extensible plugin. Subaccounts for WooCommerce – The most comprehensive subaccount management plugin for WooCommerce The Subaccounts for WooCommerce plugin gives you everything you need to add powerful subaccount functionality to your store. Subaccounts Pro (our premium version) and its extensions unlock even more advanced features. The ability to create multiple subaccounts tied to a main parent account is extremely useful in the following scenarios: Companies that need to add and manage accounts for their employees Stores that need to place orders from multiple branches Businesses with multiple decision-makers involved in purchasing Parent accounts that need to supervise and monitor all subaccount activity (purchases, expenses, quotes, etc.), and even place orders on their behalf Company accounts that need to manage orders across different purchasing departments or multiple purchasing managers (B2B and similar cases) Sales agents or representatives who need to create new accounts for newly acquired customers and, if needed, place orders on their behalf 🏆 Main features Subaccounts for WooCommerce (free version) provides support for the following features: Two subaccount modes available Whether your customers need parent-level control over multiple separate subaccounts or the ability to add users to their company account, we’ve got them covered. Multi-User mode: This is the best option for company accounts that need to place orders across different purchasing departments or via multiple purchasing managers (B2B and similar). Sub-User mode: This is the ideal solution if you want to keep accounts separate while still allowing the parent account to maintain control and supervise subaccount activity (purchases, expenses, quotes, etc.). Frontend subaccount management Allow customers to easily create new subaccounts and manage subaccount details, view subaccount orders, and monitor purchases with full visibility. Allow customers to add their own subaccounts (up to 10 subaccounts per parent account in the free version) Allow parent accounts to edit subaccount details, including billing and shipping addresses Allow customers to view and monitor subaccount orders directly from their own My Account area For each purchase display information about who did actually placed the order Allow parent accounts to switch forward and backward from their account to any subaccount user account using our advanced and secure user switching system Tailored Settings Target Users Precisely — Enable the subaccount system only for the roles you choose (including custom roles). Assign Roles with Ease — Automatically set specific roles for subaccounts created on the frontend. Keep Roles Consistent — Let subaccounts inherit the same roles as their parent. Keep Roles in Sync — Keep subaccount roles synchronized with the parent account. Set Limits — Control the number of subaccounts parent accounts can create. Customize Appearance — Customize the User Switcher Pane to match your theme’s color scheme. 🚀 Premium features Subaccounts Pro (premium version) is an extended version of the plugin and includes the following additional features: Unlimited Subaccounts — Allow parent accounts (managers) to create an unlimited number of subaccounts. Take Control — Create, assign, and fully manage subaccounts directly from the WordPress admin dashboard. Own Your Workflow — Control who can create and manage subaccounts: customers, admins, or both. Toggle Subaccount Access — Easily activate or deactivate subaccounts whenever needed. Streamline Billing and Shipping — Force subaccounts to inherit parent account addresses effortlessly. Stay Informed — Include subaccount information in WooCommerce new order emails for admins, customers, or both. Know Who’s Ordering — In the admin area, display who actually placed each order in the WooCommerce orders list and order pages. Know Your Orders — Display parent and subaccount information in the WooCommerce orders list. See Account Relationships — Display parent and subaccount information, including their relationships, in the WordPress users list page. Filter Users with Ease — Quickly filter customers by account type (e.g. parent accounts or subaccounts) or by parent account right from the admin dashboard Users list. Frontend User Filtering — Filter subaccounts by status (all, active, or deactivated). Upgrade to Subaccounts Pro and get a full suite of tools to create and manage subaccounts in WooCommerce! Upgrading to Subaccounts Pro is easy: just install the free version of the plugin and navigate to: Admin Dashboard → WooCommerce → Subaccounts → Add-Ons. From there you will be able to easily and securely upgrade to the premium version of the plugin in just a few clicks. Alternatively, you can get Subaccounts Pro and its add-ons directly from our website: https://subaccounts.pro/. 🔌 Add-Ons available Order Approval Add-On: Give parent accounts full visibility and control by allowing them to review, edit, and approve or reject subaccount orders before they’re completed. Supervisor Add-On: Allow administrators to create a three-level nested account structure by assigning a Supervisor account as parent to multiple Manager account types (e.g. Supervisor → Manager → Subaccount). 🌐 Languages and translations Subaccounts for WooCommerce is translation ready and is currently available in the following languages: English French Italian Translate Subaccounts for WooCommerce into your language and earn big discounts on Subaccounts Pro and its add-ons!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C