Skip to contentWclovers Wcfm Membership – Woocommerce Memberships For Multivendor Marketplace vulnerabilities
- wclovers wcfm membership – woocommerce memberships for multivendor marketplaceWCFM - WooCommerce Multivendor Membership <= 2.11.10 - Insecure Direct Object Reference to Limited Privilege Escalation via User Role OverwriteCVE-2026-36888.1 High
- wclovers wcfm membership – woocommerce memberships for multivendor marketplaceWCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.11.8 - Insecure Direct Object Reference to Update Membership PaymentCVE-2025-151474.3 Medium
- wclovers wcfm membership – woocommerce memberships for multivendor marketplace, wcfm membership +1 moreWCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password ChangeCVE-2023-22769.8 Critical
- wclovers wcfm membership, wcfm membership – woocommerce memberships for multivendor marketplace +1 moreWCFM Membership <= 2.9.10 - Cross-Site Request ForgeryCVE-2022-49416.3 Medium
- wclovers wcfm membership, wcfm membership – woocommerce memberships for multivendor marketplace +1 moreWCFM Membership <= 2.10.0 - Missing AuthorizationCVE-2022-49407.3 High
- wclovers wcfm membership, wcfm membership – woocommerce memberships for multivendor marketplace +1 moreWCFM Membership <= 2.10.0 - Unauthenticated Privilege EscalationCVE-2022-4939Public exploit9.8 Critical