Skip to contentWclovers Wcfm – Frontend Manager For Woocommerce vulnerabilities
- wc lovers wcfm – frontend manager for woocommerceWordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-619876.5 Medium
- wclovers wcfm – frontend manager for woocommerceWCFM – Frontend Manager for WooCommerce <= 6.7.27 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Vendor Data Manipulation via Multiple AJAX HandlersCVE-2026-100414.3 Medium
- wclovers wcfm – frontend manager for woocommerceWCFM – Frontend Manager for WooCommerce <= 6.7.27 - Missing Authorization to Unauthenticated Arbitrary Inquiry Reply Injection via wcfm-my-account-enquiry-manage ControllerCVE-2026-129945.3 Medium
- wclovers wcfm – frontend manager for woocommerceWCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.25 - Authenticated (Vendor+) Insecure Direct Object Reference to Arbitrary User DeletionCVE-2026-25548.1 High
- wclovers wcfm – frontend manager for woocommerceWCFM - WooCommerce Frontend Manager <= 6.7.25 - Insecure Direct Object References to Autenticated (Vendor+) Arbitrary Post/Product ManipulationCVE-2026-48968.1 High
- wclovers wcfm – frontend manager for woocommerceWCFM - WooCommerce Frontend Manager <= 6.7.24 - Authenticated (Shop Manager+) Arbitrary Options UpdateCVE-2026-08457.2 High
- wc lovers wcfm – frontend manager for woocommerceWordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.7.24 - Broken Access Control vulnerabilityCVE-2025-540042.7 Low
- wclovers frontend manager for woocommerce along with bookings subscription listings compatible, wcfm – frontend manager for woocommerce +1 moreWCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.16 - Missing Authorization to Unauthenticated Plugin Settings ModificationCVE-2025-37806.5 Medium
- wclovers frontend manager for woocommerce along with bookings subscription listings compatible, wcfm – frontend manager for woocommerce +1 moreWCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Privilege EscalationCVE-2024-82908.8 High
- wc lovers wcfm – frontend manager for woocommerceWordPress WCFM plugin <= 6.7.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-299295.9 Medium
- wclovers frontend manager for woocommerce along with bookings subscription listings compatible, wcfm – frontend manager for woocommerce +1 moreWCFM Frontend Manager <= 6.5.13 - Cross-Site Request ForgeryCVE-2022-49386.3 Medium
- wclovers frontend manager for woocommerce along with bookings subscription listings compatible, wcfm – frontend manager for woocommerce along with bookings subscription listings compatible +1 moreThe WCFM Frontend Manager plugin for WordPress is vulnerable to unauthorized modification and...CVE-2022-49376.3 Medium
- unknown wcfm – frontend manager for woocommerce along with bookings subscription listings compatible, wclovers frontend manager for woocommerce along with bookings subscription listings compatible +1 moreWCFM - Frontend Manager for WooCommerce < 6.5.12 - Customer/Subscriber+ SQL InjectionCVE-2021-248358.8 High