WCFM Membership vulnerabilities

2 known vulnerabilities in WCFM Membership from WC Lovers. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  WCFM Membership: Improper Neutralization of Input During Web Page Generation

  CVE-2026-39744Nov 6, 2026WC Lovers

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Stored XSS.This issue affects WCFM Membership: from n/a through 2.12.0.

• 7.3 High severity

  WCFM Membership: Missing Authorization

  CVE-2026-42753May 27, 2026WC Lovers

  Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through <= 2.11.10.