How many wclovers wcfm membership CVEs are in CISA KEV?

None of wclovers wcfm membership's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of wclovers wcfm membership are affected?

11 distinct wclovers wcfm membership versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wclovers wcfm membership CVEs?

wclovers wcfm membership's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-639 (Authorization Bypass Through User-Controlled Key).

How many critical wclovers wcfm membership vulnerabilities are there?

wclovers wcfm membership has 2 critical and 3 high-severity CVEs.

What is the average severity of wclovers wcfm membership CVEs?

The average CVSS base score across wclovers wcfm membership's scored CVEs is 8.6.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

wclovers

5 CVEs

wclovers wcfm membership Vulnerabilities

Name: wclovers wcfm membership vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for wcfm membership by wclovers.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.6

Avg CVSS

2023–2026

Last updated May 27, 2026

Overview

wclovers wcfm membership has 5 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wclovers wcfm membership, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of wclovers wcfm membership's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High3

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wclovers wcfm membership's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No wclovers wcfm membership CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every wclovers wcfm membership version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2.10.01 CVE
< 2.10.11 CVE
< 2.10.111 CVE
<= 2.10.71 CVE
<= 2.11.101 CVE
>= 2.11.111 CVE

Fixed in

> 2.11.101 CVE
2.10.01 CVE
2.10.11 CVE
2.10.111 CVE
2.11.111 CVE

Find a version

5 CVEs

Sort

WordPress WCFM Membership plugin <= 2.11.10 - Broken Access Control vulnerability
CVE-2026-42753
Patch
CWE-862
High · CVSS 7.3
EPSS 0.2% (8th pct)2026-05-27
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Change
CVE-2023-2276
Patch
CWE-639
Critical · CVSS 9.8
EPSS 1.1% (62th pct)2023-05-20
WCFM Membership <= 2.9.10 - Cross-Site Request Forgery
CVE-2022-4941
Patch
CWE-352
High · CVSS 8.8
EPSS 0.3% (25th pct)2023-04-05
WCFM Membership <= 2.10.0 - Missing Authorization
CVE-2022-4940
Patch
CWE-862
High · CVSS 7.3
EPSS 1.1% (62th pct)2023-04-05
WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation
CVE-2022-4939
Patch
CWE-862
Critical · CVSS 9.8
EPSS 2.1% (80th pct)2023-04-05

Common weakness types

The CWE weakness categories most often found in wclovers wcfm membership CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many wclovers wcfm membership CVEs were published each year.

2023

4

2026

1

Other wclovers products

Browse vulnerabilities for other products by wclovers.

WCFM – Frontend Manager for WooCommerce10 CVEs frontend manager for woocommerce along with bookings subscription listings compatible6 CVEs wcfm marketplace6 CVEs WCFM Membership – WooCommerce Memberships for Multivendor Marketplace6 CVEs WCFM Marketplace – Multivendor Marketplace for WooCommerce5 CVEs WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible2 CVEs WCFM – Multivendor Marketplace REST API for WooCommerce2 CVEs WooCommerce Frontend Manager – Ultimate1 CVEs

All wclovers vulnerabilities

Frequently asked questions

Common questions about wclovers wcfm membership vulnerabilities.

How many CVEs does wclovers wcfm membership have?: wclovers wcfm membership has 5 published CVE records since 2023.
How many wclovers wcfm membership CVEs are in CISA KEV?: None of wclovers wcfm membership's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wclovers wcfm membership vulnerabilities?: No wclovers wcfm membership CVEs currently have a tracked public exploit in this dataset.
Which versions of wclovers wcfm membership are affected?: 11 distinct wclovers wcfm membership versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wclovers wcfm membership CVEs?: wclovers wcfm membership's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-639 (Authorization Bypass Through User-Controlled Key).
How many critical wclovers wcfm membership vulnerabilities are there?: wclovers wcfm membership has 2 critical and 3 high-severity CVEs.
What is the average severity of wclovers wcfm membership CVEs?: The average CVSS base score across wclovers wcfm membership's scored CVEs is 8.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wclovers wcfm membership vulnerabilities

Monitor new wclovers wcfm membership vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing