WCFM Membership – WooCommerce Memberships for Multivendor Marketplace

Vulnerabilities 5Slug wc-multivendor-membershipLatest version 2.11.11WordPress.org →

Minimum safe version

2.11.9

Update to 2.11.9 or later to address 5 fixable vulnerabilities

Latest available2.11.11 ✓
High 8.8
2023-04-06< 2.10.1

WordPress WCFM Membership Plugin <= 2.9.10 is vulnerable to Cross Site Request Forgery (CSRF)

PatchstackCVEWordfenceWPScan
Medium 6.5
2023-04-06< 2.10.1

WordPress WCFM Membership Plugin <= 2.10.0 is vulnerable to Broken Access Control

PatchstackCVEWordfenceWPScan
Critical 9.8
2023-04-06< 2.10.1

WordPress WCFM Membership Plugin <= 2.10.0 is vulnerable to Privilege Escalation

PatchstackCVEWordfenceWPScan