WordPress Vulnerability Scanner WPSec
Vulnerabilities / WCFM Membership – WooCommerce Memberships for Multivendor Marketplace

WCFM Membership – WooCommerce Memberships for Multivendor Marketplace vulnerabilities

Advisories WPSec published for WCFM Membership – WooCommerce Memberships for Multivendor Marketplace. Other sources may list more. Its attack surface: WCFM Membership – WooCommerce Memberships for Multivendor Marketplace on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-11-03 WPSEC-2026-2277 WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.12.0 - Authenticated (Subscriber+) Membership Payment Bypass via WooCommerce Checkout Order Medium 4.3 2.12.1
2026-11-03 WPSEC-2026-2276 WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.12.0 - Authenticated (Vendor+) Missing Authorization to Membership Plan Change Medium 4.3 2.12.1
2026-11-03 WPSEC-2026-2275 WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.12.0 - Authenticated (Subscriber+) Membership Payment Bypass via PayPal IPN Medium 4.3 2.12.1
2026-11-03 WPSEC-2026-2274 WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.12.0 - Unauthenticated Missing Authorization to Disabled Membership Plan Selection Medium 5.3 2.12.1

License: CC BY 4.0