Pricing
Case studies
Login
Start trial
WCFM Marketplace
WC Lovers
Developer
3.6.17
Latest version
20,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
1 present
5 fixed
3 Mitigation rules
Broken Access Control vulnerability
<= 3.6.17
3 days ago
Reflected Cross Site Scripting (XSS) vulnerability
<= 3.6.11
Sep 16, 2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
<= 3.6.2
Nov 27, 2023
Missing Authorization vulnerability
<= 3.4.11
Apr 6, 2023
Cross-Site Request Forgery vulnerability
<= 3.4.12
Apr 6, 2023
Unauthenticated SQL Injection (SQLi) vulnerability
<= 3.4.11
Nov 22, 2021