Wc Lovers 11 CVEs in 4 Wc Lovers products, including Wcfm Marketplace, Wcfm Membership, Wcfm – Frontend Manager For Woocommerce. Newest: CVE-2026-39794 (2026-10-06).
Wc Lovers products with known CVEs Wc Lovers CVEs — newest first CVE Severity Score Published Summary CVE-2026-39794High 7.52026-10-06 Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions. CVE-2026-32480Medium 5.32026-09-04 Missing Authorization vulnerability in WC Lovers WCFM Membership allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects W… CVE-2026-84756High 7.12026-09-03 Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions. CVE-2026-83562Medium 6.52026-09-02 Contributor Cross Site Scripting (XSS) in WCFM Marketplace <= 3.8.2 versions. CVE-2026-81286Critical 9.32026-09-02 Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions. CVE-2026-42753High 7.32026-05-27 Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Lev… CVE-2025-63029High 7.62026-04-15 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace all… CVE-2025-64631Medium 4.92025-12-16 Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security L… CVE-2025-54004Low 2.72025-12-16 Missing Authorization vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce wc-frontend-manager allows Exploiting Incorrectly Configured Access Co… CVE-2024-44009High 7.12024-09-17 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace all… CVE-2024-29929Medium 5.92024-03-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce allows…