Frontend Manager For Woocommerce Along With Bookings Subscription Listings Compatible vulnerabilities

3 known vulnerabilities in Frontend Manager For Woocommerce Along With Bookings Subscription Listings Compatible from Wclovers. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WCFM – Frontend Manager for WooCommerce: Authorization Bypass Through User-Controlled Key

  CVE-2024-8290Sep 25, 2024Wclovers

  The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.12 via the WCFM_Customers_Manage_Controller::proce

• 8.8 High severity

  WCFM – Frontend Manager for WooCommerce: Cross-Site Request Forgery

  CVE-2022-4938Apr 5, 2023Wclovers

  The WCFM Frontend Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.6.0 due to missing nonce checks on various AJAX actions. This makes it possible for unauthenticated attackers to perform a wide varie

• 8.8 High severity

  WCFM – Frontend Manager for WooCommerce along…: Missing Authorization

  CVE-2022-4937Apr 5, 2023Wclovers

  The WCFM Frontend Manager plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 6.6.0 due to missing capability checks on various AJAX actions. This makes it possible for authenticated attackers, w