WC Lovers WCFM Membership vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting WC Lovers WCFM Membership: 3 record(s), with affected versions and fixes.

CVE-2026-32480 Medium · 5.3 CWE-862 Sep 4, 2026

WordPress WCFM Membership plugin <= 2.11.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in WC Lovers WCFM Membership allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WCFM Membership: from n/a through 2.11.11.

CVE-2026-84756 High · 7.1 CWE-266 Sep 3, 2026

WordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.

CVE-2026-42753 High · 7.3 CWE-862 May 27, 2026

WordPress WCFM Membership plugin <= 2.11.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through <= 2.11.10.