CVE-2026-32480

MEDIUM NVD

CVSS Score 5.3

Severity MEDIUM

Published Sep 04, 2026

Vendor unknown

Description

Missing Authorization vulnerability in WC Lovers WCFM Membership allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WCFM Membership: from n/a through 2.11.11.

References

https://patchstack.com/database/wordpress/plugin/wc-multivendor-membership/vulnerability/wordpress-wcfm-membership-plugin-2-11-11-broken-access-control-vulnerability?_s_id=cve