WCFM – Frontend Manager for WooCommerce
WC Lovers
Developer
6.7.26
Latest version
20,000
Installations
No date
Last updated
Vulnerability history
0 present
9 patched
5 Mitigation rules
- WordPress WCFM - WooCommerce Frontend Manager plugin <= 6.7.24 - Authenticated (Shop Manager+) Arbitrary Options Update vulnerability<= 6.7.2409/02/2026
- Broken Access Control vulnerability<= 6.7.2415/12/2025
- Missing Authorization to Unauthenticated Plugin Settings Modification vulnerability<= 6.7.1608/07/2025
- Insecure Direct Object Reference to Account Takeover/Privilege Escalation vulnerability<= 6.7.1225/09/2024
- Cross Site Scripting (XSS) vulnerability<= 6.7.825/03/2024
- Missing Authorization vulnerability6.6.006/04/2023
- Cross-Site Request Forgery vulnerability<= 6.5.1306/04/2023
- Unauthenticated SQL Injection (SQLi) vulnerability<= 6.6.119/02/2022
- SQL Injection (SQLi) vulnerability<= 6.5.1111/10/2021