cleantalk
Vulnerabilities and Security Researches

WCFM Membership – WooCommerce Memberships for Multivendor Marketplace, CVE-2026-42753

CVE, Research URL

CVE-2026-42753

Published on
May 27, 2026
Research Description
Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through <= 2.11.10.
Affected versions
max 2.11.10.
Status
vulnerable