https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T19:26:21.450398+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-12967 fkie_cve-2026-12967 2026-11-13T19:26:21.451984+00:00

The WCFM Membership WordPress plugin before 2.12.1 does not verify that payment was made before completing a paid membership, allowing any authenticated Subscriber/Customer to activate a paid vendor membership for free and gain the marketplace vendor role.

 https://db.gcve.eu/vuln/ghsa-9rfw-33wj-5wc4 GHSA-9rfw-33wj-5wc4 2026-11-13T19:26:21.452040+00:00

The WCFM Membership WordPress plugin before 2.12.1 does not verify that payment was made before completing a paid membership, allowing any authenticated Subscriber/Customer to activate a paid vendor membership for free and gain the marketplace vendor role.