CVE-2026-12967
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 06, 2026
Vendor
unknown
Description
The WCFM Membership WordPress plugin before 2.12.1 does not verify that payment was made before completing a paid membership, allowing any authenticated Subscriber/Customer to activate a paid vendor membership for free and gain the marketplace vendor role.