Vendor

WC Lovers

43 known vulnerabilities.

Products

WCFM – Frontend Manager for WooCommerce 11 WCFM Marketplace 8 WCFM Membership 7 WCFM Membership – WooCommerce Memberships for Multivendor Marketplace 6 WCFM Marketplace – Multivendor Marketplace for WooCommerce 6 WCFM – Multivendor Marketplace REST API for WooCommerce 2 WooCommerce Frontend Manager – Ultimate 1 WooCommerce Multivendor Marketplace – REST API 1 WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible 1

All Critical High Medium Low Exploited only Public exploit

43 results · Feed

Medium 6.3

CVE-2022-4937

The WCFM Frontend Manager plugin for WordPress is vulnerable to unauthorized modification and access of data in version…

WC Lovers WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible Web / CMS

Apr 5, 2023
Medium 6.3

CVE-2022-4936

WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery

The WCFM Marketplace plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4.11 due to missing nonce checks on various AJAX actions. This makes it possible for unauthenticated attackers to perform a wide variety …

WC Lovers WCFM Marketplace – Multivendor Marketplace for WooCommerce Web / CMS

Apr 5, 2023
High 8.8

CVE-2022-4935

WCFM Marketplace <= 3.4.11 - Missing Authorization

The WCFM Marketplace plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 3.4.11 due to missing capability checks on various AJAX actions. This makes it possible for authenticated attackers, with…

WC Lovers WCFM Marketplace – Multivendor Marketplace for WooCommerce Web / CMS

Apr 5, 2023