CVE-2026-61990

MOYENNE 4.3CVE-2026-61990 · Published 07/11/2026 · updated 07/11/2026

En bref

CVE-2026-61990 est une vulnérabilité MOYENNE (CVSS 4.3).
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through 2.12.0.

References

patchstack.com/database/wordpress/plugin/wc-multivendor-membership/vulnerability/wordpress-wcfm-membership-plugin-2-12-0-broken-access-control-vulnerability-3

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free