CVE-2026-84756

Thursday, September 03, 2026

7.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Summary

Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.

Affected Software

Vendor	Product	Version Range	Status
WC Lovers	WCFM Membership	`n/a <= 2.11.11`	affected

Weaknesses

CWE-266: CWE-266 Incorrect Privilege Assignment

References

https://patchstack.com/database/wordpress/plugin/wc-multivendor-membership/vulnerability/wordpress-wcfm-membership-plugin-2-11-11-privilege-escalation-vulnerability?_s_id=cve

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.