Medium · 5.3 CVE-2026-32480 EUVD-2026-70969GHSA-rxqj-65pp-pjhr

WordPress WCFM Membership plugin <= 2.11.11 - Broken Access Control vulnerability

Published Sep 4, 2026 · Updated Sep 4, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in WC Lovers WCFM Membership allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects WCFM Membership: from n/a through 2.11.11.

Vendor	Product	Affected	Fixed
WC Lovers	WCFM Membership	≤ 2.11.11	—