Product by WC Lovers

    WCFM Membership

    4 known vulnerabilities in WCFM Membership (WC Lovers), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WCFM Membership (WC Lovers)
    CriticalCVE-2022-4939

    WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation

    also in 1 other product

    9.8
    CriticalCVE-2023-2276

    Wclovers Wcfm Membership: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    9.8
    HighCVE-2022-4940

    WCFM Membership <= 2.10.0 - Missing Authorization

    also in 1 other product

    7.3
    HighCVE-2022-4941

    WCFM Membership <= 2.9.10 - Cross-Site Request Forgery

    also in 1 other product

    6.3

    All products by WC Lovers