CVE-2026-39777

MEDIO 4.3CVE-2026-39777 · Published 03/11/2026 · updated 03/11/2026

In breve

CVE-2026-39777 è una vulnerabilità MEDIO (CVSS 4.3).
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through 2.12.0.

References

patchstack.com/database/wordpress/plugin/wc-multivendor-membership/vulnerability/wordpress-wcfm-membership-plugin-2-12-0-broken-access-control-vulnerability-2

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free