Plugin icon

WCFM Membership – WooCommerce Memberships for Multivendor Marketplace

wc-multivendor-membership

Vulnerabilities:

5

Last Updated:

May 2, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-02-09
Title
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace < 2.11.9 - Insecure Direct Object Reference to Update Membership Payment
Fixed in
Fixed in 2.11.9
CVSS
4.3 (medium)
Published
2023-05-03
Title
WCFM Membership < 2.11.0 - Unauthenticated Arbitrary Password Update via IDOR
Fixed in
Fixed in 2.11.0
CVSS
9.8 (critical)
Published
2023-04-05
Title
WCFM Membership < 2.10.1 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 2.10.1
CVSS
9.8 (critical)
Published
2023-04-05
Title
WCFM Membership < 2.10.0 - Multiple CSRF
Fixed in
Fixed in 2.10.0
CVSS
5.4 (medium)
Published
2023-04-05
Title
WCFM Membership < 2.10.1 - Unauthenticated AJAX Calls
Fixed in
Fixed in 2.10.1
CVSS
7.3 (high)