VendorsWC Loverswcfm_membershipall versions
Vulnerabilities

WC Lovers WCFM Membership

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2022-4939
WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation
Published 2023-04-05 · Modified
9.8EPSS 0.021
CVE-2023-2276
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Change
Published 2023-05-20 · Modified
9.8EPSS 0.011
CVE-2022-4941
WCFM Membership <= 2.9.10 - Cross-Site Request Forgery
Published 2023-04-05 · Modified
8.8EPSS 0.003
CVE-2022-4940
WCFM Membership <= 2.10.0 - Missing Authorization
Published 2023-04-05 · Modified
7.3EPSS 0.011