CVE-2026-39744

HOCH 7.1CVE-2026-39744 · Published 06/11/2026 · updated 06/11/2026

Kurz gesagt

CVE-2026-39744 ist eine Schwachstelle (HOCH (CVSS 7.1)).
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Stored XSS.This issue affects WCFM Membership: from n/a through 2.12.0.

References

patchstack.com/database/wordpress/plugin/wc-multivendor-membership/vulnerability/wordpress-wcfm-membership-plugin-2-12-0-cross-site-scripting-xss-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free