High · 7.1 CVE-2026-84756 EUVD-2026-70586GHSA-wjjj-qg6g-7h4c

WordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerability

Published Sep 3, 2026 · Updated Sep 7, 2026 · Assigned by Patchstack

Vendor: WC Lovers Product: WCFM Membership

Description

Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.

Affected products

Vendor	Product	Affected	Fixed
WC Lovers	WCFM Membership	≤ 2.11.11	—

References

https://patchstack.com/database/wordpress/plugin/wc-multivendor-membership/vulnerability/wordpress-wcfm-membership-plugin-2-11-11-privilege-escalation-vulnerability?_s_id=cve vdb-entry