Pricing
Case studies
Login
Start trial
WCFM Membership
WC Lovers
Developer
2.12.1
Latest version
10,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
11 patched
3 Mitigation rules
Subscriber+ Payment Verification Bypass vulnerability
< 2.12.1
21 hours ago
Cross Site Scripting (XSS) vulnerability
<= 2.12.0
2 days ago
Broken Access Control vulnerability
<= 2.12.0
3 days ago
Broken Access Control vulnerability
<= 2.12.0
3 days ago
Broken Access Control vulnerability
<= 2.11.11
04/09/2026
Privilege Escalation vulnerability
<= 2.11.11
02/09/2026
Broken Access Control vulnerability
<= 2.11.10
29/05/2026
WordPress WCFM Membership - WooCommerce Memberships for Multivendor Marketplace plugin <= 2.11.8 - Insecure Direct Object Reference to Update Membership Payment vulnerability
<= 2.11.8
09/02/2026
Missing Authorization vulnerability
<= 2.10.0
06/04/2023
Cross-Site Request Forgery vulnerability
<= 2.9.10
06/04/2023
Unauthenticated Privilege Escalation vulnerability
<= 2.10.0
06/04/2023