Vulnerabilities in WC Lovers

19 results

CVE-2026-81286CRITICALWordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-39794HIGHWordPress WooCommerce Multivendor Marketplace – REST API plugin <= 1.6.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-29929MEDIUMWordPress WCFM plugin <= 6.7.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-64631MEDIUMWordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-44009HIGHWordPress WCFM Marketplace <= 3.6.11 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-54004LOWWordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.7.24 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-32480MEDIUMWordPress WCFM Membership plugin <= 2.11.11 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-84756HIGHWordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2025-63029HIGHWordPress WCFM Marketplace plugin <= 3.7.1 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-61990MEDIUMWordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-83562MEDIUMWordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-62000HIGHWordPress WCFM Marketplace plugin <= 3.8.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-42753HIGHWordPress WCFM Membership plugin <= 2.11.10 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39743MEDIUMWordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-120848MEDIUMWordPress WCFM Marketplace plugin <= 3.8.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-39777MEDIUMWordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-120849MEDIUMWordPress WCFM Marketplace plugin <= 3.8.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39744HIGHWordPress WCFM Membership plugin <= 2.12.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-61987MEDIUMWordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) vulnerabilityEPSS —