Veille CVE

Recherche « WC Lovers WCFM Membership »

4 CVE

Critique 0 Élevée 3 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « WC Lovers WCFM Membership » ✕
  1. CVE-2026-32480 5.3 Moyenne

    WC Lovers WCFM Membership

    Missing Authorization vulnerability in WC Lovers WCFM Membership allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WCFM Membership: from n/a through 2.11.11.

  2. CVE-2026-84756 7.1 Élevée

    WC Lovers WCFM Membership

    Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.

  3. CVE-2026-3688 8.1 Élevée

    wclovers WCFM Membership – WooCommerce Memberships for Multivendor Marketplace

    The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.11.10. This is due to the 'wcfmvm_membership_change' AJAX action not validating user permission to modify other users. This makes it possible for authenticated attackers, with vendor level access and above, to change any user's role to 'wcfm_vendor' by changing their membership plan.

  4. CVE-2026-42753 7.3 Élevée

    WC Lovers WCFM Membership

    Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through <= 2.11.10.