WCFM – Frontend Manager for WooCommerce
WC Lovers
Developer
6.7.27
Latest version
20,000
Installations
No date
Last updated
Vulnerability history
0 present
10 patched
5 Mitigation rules
- WordPress WCFM - WooCommerce Frontend Manager plugin <= 6.7.25 - Insecure Direct Object References to Authenticated (Vendor+) Arbitrary Post/Product Manipulation vulnerability<= 6.7.2503/04/2026
- WordPress WCFM - WooCommerce Frontend Manager plugin <= 6.7.24 - Authenticated (Shop Manager+) Arbitrary Options Update vulnerability<= 6.7.2409/02/2026
- Broken Access Control vulnerability<= 6.7.2415/12/2025
- Missing Authorization to Unauthenticated Plugin Settings Modification vulnerability<= 6.7.1608/07/2025
- Insecure Direct Object Reference to Account Takeover/Privilege Escalation vulnerability<= 6.7.1225/09/2024
- Cross Site Scripting (XSS) vulnerability<= 6.7.825/03/2024
- Missing Authorization vulnerability6.6.006/04/2023
- Cross-Site Request Forgery vulnerability<= 6.5.1306/04/2023
- Unauthenticated SQL Injection (SQLi) vulnerability<= 6.6.119/02/2022
- SQL Injection (SQLi) vulnerability<= 6.5.1111/10/2021