WordPress Vulnerability Scanner WPSec
Vulnerabilities / WCFM – Frontend Manager for WooCommerce

WCFM – Frontend Manager for WooCommerce vulnerabilities

Advisories WPSec published for WCFM – Frontend Manager for WooCommerce. Other sources may list more. Its attack surface: WCFM – Frontend Manager for WooCommerce on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-11-03 WPSEC-2026-2351 WCFM – Frontend Manager for WooCommerce <= 6.8.1 - Authenticated (Vendor+) Insecure Direct Object Reference to Arbitrary Product Modification and Post Deletion via Product Save High 8.1 6.8.2
2026-11-03 WPSEC-2026-2350 WCFM – Frontend Manager for WooCommerce <= 6.8.1 - Reflected Cross-Site Scripting via Customer Details and Notice Manage Endpoints Medium 6.1 6.8.2
2026-11-03 WPSEC-2026-2349 WCFM – Frontend Manager for WooCommerce <= 6.8.1 - Unauthenticated Missing Authorization via Inquiry Form Medium 5.3 6.8.2
2026-11-03 WPSEC-2026-2348 WCFM – Frontend Manager for WooCommerce <= 6.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Dashboard Notifications Medium 6.4 6.8.2
2026-11-03 WPSEC-2026-2347 WCFM – Frontend Manager for WooCommerce <= 6.8.1 - Authenticated (Vendor+) Missing Authorization to Site-Wide Capability Settings Modification Medium 6.5 6.8.2

License: CC BY 4.0