Wc Lovers

10 CVEs across 3 Wc Lovers products. Browse Wc Lovers vulnerabilities, severities, and proof-of-concept exploits.

Wc Lovers products with known CVEs

ProductCVEs
Wcfm Marketplace5
Wcfm Membership3
Wcfm – Frontend Manager For Woocommerce2
Wc Lovers CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-32480Medium5.32026-09-04Missing Authorization vulnerability in WC Lovers WCFM Membership allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects W…
CVE-2026-84756High7.12026-09-03Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.
CVE-2026-83562Medium6.52026-09-02Contributor Cross Site Scripting (XSS) in WCFM Marketplace <= 3.8.2 versions.
CVE-2026-81286Critical9.32026-09-02Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions.
CVE-2026-42753High7.32026-05-27Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Lev…
CVE-2025-63029High7.62026-04-15Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace all…
CVE-2025-64631Medium4.92025-12-16Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security L…
CVE-2025-54004Low2.72025-12-16Missing Authorization vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce wc-frontend-manager allows Exploiting Incorrectly Configured Access Co…
CVE-2024-44009High7.12024-09-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace all…
CVE-2024-29929Medium5.92024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce allows…