CVE-2026-39744

The WC Lovers WCFM Membership (wc-multivendor-membership) plugin for WordPress is vulnerable to Stored Cross-site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions up to and including 2.12.0 . Exploitation of this vulnerability can lea...