wclovers WCFM Membership – WooCommerce Memberships for Multivendor Marketplace

• CVE-2026-3688 High 8.1 WCFM - WooCommerce Multivendor Membership <= 2.11.10 - Insecure Direct Object Reference to Limited Privilege Escalation via User Role Overwrite 0.4%
• CVE-2025-15147 Medium 4.3 WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.11.8 - Insecure Direct Object Reference to Update Membership Payment 0.3%
• CVE-2023-2276 Critical 9.8 WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Change 1.1%
• CVE-2022-4941 Medium 6.3 WCFM Membership <= 2.9.10 - Cross-Site Request Forgery 0.3%
• CVE-2022-4940 High 7.3 WCFM Membership <= 2.10.0 - Missing Authorization 1.1%
• CVE-2022-4939 Critical 9.8 WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation 2.1%