WL
Vendor
WC Lovers
10
CVEs
0
On KEV
1
New 30D
Products
WM7.5
WooCommerce Multivendor Marketplace – REST API
WC Lovers
1 CVEs0 on KEV1 new
WM9.3
WCFM Marketplace
WC Lovers
4 CVEs0 on KEV0 new
WM7.3
WCFM Membership
WC Lovers
3 CVEs0 on KEV0 new
WF2.7
WCFM – Frontend Manager for WooCommerce
WC Lovers
1 CVEs0 on KEV0 new
WF8.5
WooCommerce Frontend Manager – Ultimate
WC Lovers.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-39794 | WM WooCommerce Multivendor Marketplace – REST API WC Lovers | 7.5 | Oct 6 | WordPress WooCommerce Multivendor Marketplace – REST API plugin <= 1.6.3 - Broken Access Control vulnerability |
| CVE-2026-32480 | WM WCFM Membership WC Lovers | 5.3 | Sep 4 | WordPress WCFM Membership plugin <= 2.11.11 - Broken Access Control vulnerability |
| CVE-2026-84756 | WM WCFM Membership WC Lovers | 7.1 | Sep 3 | WordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerability |
| CVE-2026-83562 | WM WCFM Marketplace WC Lovers | 6.5 | Sep 2 | WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-81286 | WM WCFM Marketplace WC Lovers | 9.3 | Sep 2 | WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability |
| CVE-2026-22335 | WF WooCommerce Frontend Manager – Ultimate WC Lovers. | 8.5 | Jun 17 | WordPress WooCommerce Frontend Manager – Ultimate plugin < 6.7.7 - SQL Injection vulnerability |
| CVE-2026-42753 | WM WCFM Membership WC Lovers | 7.3 | May 27 | WordPress WCFM Membership plugin <= 2.11.10 - Broken Access Control vulnerability |
| CVE-2025-63029 | WM WCFM Marketplace WC Lovers | 7.6 | Apr 15 | WordPress WCFM Marketplace plugin <= 3.7.1 - SQL Injection vulnerability |
| CVE-2025-64631 | WM WCFM Marketplace WC Lovers | 4.9 | Dec 16 | WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerability |
| CVE-2025-54004 | WF WCFM – Frontend Manager for WooCommerce WC Lovers | 2.7 | Dec 16 | WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.7.24 - Broken Access Control vulnerability |