CVE-2026-61990

MEDIUM NVD

CVSS Score 4.3

Severity MEDIUM

Published Nov 07, 2026

Vendor unknown

Description

Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through 2.12.0.

References

https://patchstack.com/database/wordpress/plugin/wc-multivendor-membership/vulnerability/wordpress-wcfm-membership-plugin-2-12-0-broken-access-control-vulnerability-3?_s_id=cve