Product by WC Lovers
WCFM Membership
4 known vulnerabilities in WCFM Membership (WC Lovers), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-4939 | WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation | 9.8 | |
| Critical | CVE-2023-2276 | Wclovers Wcfm Membership: Authorization Bypass Through User-Controlled Key | 9.8 | |
| High | CVE-2022-4940 | WCFM Membership <= 2.10.0 - Missing Authorization | 7.3 | |
| High | CVE-2022-4941 | WCFM Membership <= 2.9.10 - Cross-Site Request Forgery | 6.3 |