Skip to content
Noroxi

WCFM Membership – WooCommerce Memberships for Multivendor Marketplace

wc-multivendor-membership · plugin

Known security vulnerabilities for WCFM Membership – WooCommerce Memberships for Multivendor Marketplace. Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

2 critical · 2 with public exploit code · latest Sep 4, 2026

Vulnerabilities

  • CVE-2023-2276

    WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Ch

    Critical 9.8

  • CVE-2022-4939

    WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation

    Critical 9.8

  • CVE-2022-4941

    WCFM Membership <= 2.9.10 - Cross-Site Request Forgery

    High 8.8

  • CVE-2026-3688

    WCFM - WooCommerce Multivendor Membership <= 2.11.10 - Insecure Direct Object Reference to Limited Privilege Escalation via User Role Overwrite

    High 8.1

  • CVE-2026-42753

    WordPress WCFM Membership plugin <= 2.11.10 - Broken Access Control vulnerability

    High 7.3

  • CVE-2026-84756

    WordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerability

    High 7.1

  • CVE-2022-4940

    WCFM Membership <= 2.10.0 - Missing Authorization

    Medium 6.5

  • CVE-2026-32480

    WordPress WCFM Membership plugin <= 2.11.11 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2025-15147

    WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.11.8 - Insecure Direct Object Reference to Update Membership Payment

    Medium 4.3

← Back to directory