CVE-2025-3780

🗓️ 08 Jul 2025 23:22:48Reported by WordfenceType

WCFM Frontend Manager for WooCommerce has a vulnerability allowing data modification by unauthenticated users

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-3780	9 Jul 202500:19	–	circl
CNNVD	WordPress plugin WCFM - Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible Security Vulnerability	8 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-3780 WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.16 - Missing Authorization to Unauthenticated Plugin Settings Modification	8 Jul 202523:22	–	cvelist
EUVD	EUVD-2025-20756	3 Oct 202520:07	–	euvd
NVD	CVE-2025-3780	9 Jul 202500:15	–	nvd
OSV	CVE-2025-3780	9 Jul 202500:15	–	osv
Patchstack	WordPress WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin <= 6.7.16 - Missing Authorization to Unauthenticated Plugin Settings Modification vulnerability	8 Jul 202520:54	–	patchstack
Positive Technologies	PT-2025-28802 · WordPress · Wcfm – Frontend Manager For Woocommerce +1	8 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-3780	11 Jul 202500:25	–	redhatcve
Vulnrichment	CVE-2025-3780 WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.16 - Missing Authorization to Unauthenticated Plugin Settings Modification	8 Jul 202523:22	–	vulnrichment

NVD

Vulners

Node

wclovers frontend_manager_for_woocommerce_along_with_bookings_subscription_listings_compatibleRange<6.7.17wordpress

[
  {
    "vendor": "wclovers",
    "product": "WCFM – Frontend Manager for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "6.7.16",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/26a82493-a6a5-4d8e-8322-942925a54cc3
plugins	www.plugins.trac.wordpress.org/browser/wc-frontend-manager/tags/6.7.16/core/class-wcfm-admin.php
plugins	www.plugins.trac.wordpress.org/browser/wc-frontend-manager/tags/6.7.16/core/class-wcfm-admin.php

17 Jun 2026 09:20Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.00247

SSVC

CWE-862