Wc Lovers vulnerabilities

Products

• Wcfm Marketplace 10
• Wcfm Membership 8
• Wcfm – Frontend Manager For Woocommerce 3

Newest

• wc lovers wcfm – frontend manager for woocommerce WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-61987 6.5 MediumNovember 8, 2026
• wc lovers wcfm membership WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerability CVE-2026-61990 4.3 MediumNovember 7, 2026
• wc lovers wcfm marketplace WordPress WCFM Marketplace plugin <= 3.8.3 - Broken Access Control vulnerability CVE-2026-120849 4.3 MediumNovember 7, 2026
• wc lovers wcfm marketplace WordPress WCFM Marketplace plugin <= 3.8.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-120848 6.5 MediumNovember 7, 2026
• wc lovers wcfm membership WordPress WCFM Membership plugin <= 2.12.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-39744 7.1 HighNovember 6, 2026
• unknown wcfm membership WCFM Membership < 2.12.1 - Subscriber+ Payment Verification Bypass CVE-2026-12967 6.5 MediumNovember 6, 2026
• wc lovers wcfm marketplace WordPress WCFM Marketplace plugin <= 3.8.2 - Broken Access Control vulnerability CVE-2026-62000 7.5 HighNovember 4, 2026
• wc lovers wcfm membership WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerability CVE-2026-39777 4.3 MediumNovember 3, 2026
• wc lovers wcfm membership WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerability CVE-2026-39743 5.3 MediumNovember 3, 2026
• wc lovers woocommerce multivendor marketplace – rest api WordPress WooCommerce Multivendor Marketplace – REST API plugin <= 1.6.3 - Broken Access Control vulnerability CVE-2026-39794 7.5 HighOctober 6, 2026
• wc lovers wcfm membership WordPress WCFM Membership plugin <= 2.11.11 - Broken Access Control vulnerability CVE-2026-32480 5.3 MediumSeptember 4, 2026
• wc lovers wcfm membership WordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerability CVE-2026-84756 7.1 HighSeptember 3, 2026
• wc lovers wcfm marketplace WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-83562 6.5 MediumSeptember 2, 2026
• wc lovers wcfm marketplace WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability CVE-2026-81286 9.3 CriticalSeptember 2, 2026
• unknown wcfm marketplace WCFM Marketplace < 3.8.2 - Unauthenticated Refund Request Creation on Guest Orders CVE-2026-77701 5.3 MediumAugust 28, 2026
• unknown wcfm marketplace WCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR CVE-2026-14196 4.3 MediumAugust 19, 2026
• wc lovers wcfm membership WordPress WCFM Membership plugin <= 2.11.10 - Broken Access Control vulnerability CVE-2026-42753 7.3 HighMay 27, 2026
• wc lovers wcfm marketplace WordPress WCFM Marketplace plugin <= 3.7.1 - SQL Injection vulnerability CVE-2025-63029 7.6 HighApril 15, 2026
• wc lovers wcfm marketplace WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerability CVE-2025-64631 4.9 MediumDecember 16, 2025
• wc lovers wcfm – frontend manager for woocommerce WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.7.24 - Broken Access Control vulnerability CVE-2025-54004 2.7 LowDecember 16, 2025
• wc lovers wcfm marketplace WordPress WCFM Marketplace <= 3.6.11 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-44009 7.1 HighSeptember 17, 2024
• wc lovers wcfm – frontend manager for woocommerce WordPress WCFM plugin <= 6.7.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-29929 5.9 MediumMarch 27, 2024