Vendor

    Wc Lovers

    12 known vulnerabilities in products by Wc Lovers, 0 of them actively exploited (CISA KEV).

    Key figures

    12

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wc Lovers
    CriticalCVE-2026-81286

    WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability

    		9.3
    HighCVE-2026-39794

    WC Lovers WooCommerce Multivendor Marketplace: Missing Authorization

    		7.5
    HighCVE-2026-22335

    WordPress WooCommerce Frontend Manager – Ultimate plugin < 6.7.7 - SQL Injection vulnerability

    		8.5
    HighCVE-2026-84756

    WordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerability

    		7.1
    MediumCVE-2026-83562

    WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2025-63029

    WordPress WCFM Marketplace plugin <= 3.7.1 - SQL Injection vulnerability

    		7.6
    MediumCVE-2026-32480

    WordPress WCFM Membership plugin <= 2.11.11 - Broken Access Control vulnerability

    		5.3
    HighCVE-2026-42753

    WordPress WCFM Membership plugin <= 2.11.10 - Broken Access Control vulnerability

    		7.3
    HighCVE-2024-44009

    WordPress WCFM Marketplace <= 3.6.11 - Reflected Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    MediumCVE-2025-64631

    WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerability

    		4.9
    MediumCVE-2024-29929

    WordPress WCFM plugin <= 6.7.8 - Cross Site Scripting (XSS) vulnerability

    		5.9
    LowCVE-2025-54004

    WC Lovers WCFM: Missing Authorization

    		2.7

    Products

    Products by Wc Lovers
    Wcfm Marketplace50
    Wcfm Membership30