WC Lovers
Vulnerability activity for WC Lovers: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 7
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 10
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 10
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 4.3MediumNov 7, 2026WCFM Membership Auth bypass / access controlCVE-2026-61990Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through 2.12.0.
- 4.3MediumNov 7, 2026WCFM Marketplace Auth bypass / access controlCVE-2026-120849Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Marketplace: from n/a through 3.8.3.
- 6.5MediumNov 7, 2026WCFM Marketplace XSSCVE-2026-120848Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Stored XSS.This issue affects WCFM Marketplace: from n/a through 3.8.3.
- 7.1HighNov 6, 2026WCFM Membership XSSCVE-2026-39744Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Stored XSS.This issue affects WCFM Membership: from n/a through 2.12.0.
- 7.5HighNov 4, 2026WCFM Marketplace Auth bypass / access controlCVE-2026-62000Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Marketplace: from n/a through 3.8.2.
- 4.3MediumNov 3, 2026WCFM Membership Auth bypass / access controlCVE-2026-39777Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through 2.12.0.
- 5.3MediumNov 3, 2026WCFM Membership Auth bypass / access controlCVE-2026-39743Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through 2.12.0.
- 7.5HighOct 6, 2026WC Lovers WooCommerce Multivendor Marketplace – REST API Auth bypass / access controlCVE-2026-39794Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.
- 5.3MediumSep 4, 2026WCFM Membership Auth bypass / access controlCVE-2026-32480Missing Authorization vulnerability in WC Lovers WCFM Membership allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WCFM Membership: from n/a through 2.11.11.
- 7.1HighSep 3, 2026WCFM Membership Privilege escalationCVE-2026-84756Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.
Top products
- WCFM Membership6 CVEs in the last year
- WCFM Marketplace3 CVEs in the last year
- WooCommerce Multivendor Marketplace – REST API1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.