Threats tagged 'ghsa-jh5x-c2rm-cf9w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2026-39777WC Lovers WCFM Membership wc-multivendor-membership · Missing Authorization Vulnerability Medium4.32026-11-03GCVE DatabaseCVE-2026-39777 A missing authorization vulnerability exists in WC Lovers WCFM Membership plugin (wc-multivendor-membership) up to version 2.12.0. This flaw allows attackers with limited privileges to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a medium severity rating with a CVSS score of 4.3. Report on CVE-2026-39777 Vulnerability CWE-862 #ghsa-jh5x-c2rm-cf9w	GCVE Database	2026-11-03

Page 1 of 1