CVE-2026-12967 | WCFM Membership Plugin up to 2.12.0 on WordPress privileges management

November 6, 2026 Yanac

A vulnerability was found in WCFM Membership Plugin up to 2.12.0 on WordPress. It has been declared as problematic. Affected is an unknown function. Such manipulation leads to improper privilege management.

This vulnerability is listed as CVE-2026-12967. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More