Threats tagged 'ghsa-85j6-7p5c-5xqx'

A missing authorization vulnerability exists in WC Lovers WCFM Membership (wc-multivendor-membership) up to version 2.12.0. This flaw allows exploitation of incorrectly configured access control security levels, potentially enabling unauthorized actions that impact data integrity. The vulnerability has a medium severity rating with a CVSS score of 5.3 and does not affect confidentiality or availability.