CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4940

The WCFM Membership plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 2.10.0 due to missing capability checks on various AJAX actions. This makes it possible for unauthenticated attackers to perform a wide variety of actions such as modifying membership details, changing renewal information, controlling membership approvals, and more.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.5%

CVSS Severity

CVSS v3 Score 7.3

References

Products affected by CVE-2022-4940

Wclovers » Wcfm Membership » Version: 1.0.0

cpe:2.3:a:wclovers:wcfm_membership:1.0.0
Wclovers » Wcfm Membership » Version: 1.0.1

cpe:2.3:a:wclovers:wcfm_membership:1.0.1
Wclovers » Wcfm Membership » Version: 1.0.2

cpe:2.3:a:wclovers:wcfm_membership:1.0.2
Wclovers » Wcfm Membership » Version: 1.0.3

cpe:2.3:a:wclovers:wcfm_membership:1.0.3
Wclovers » Wcfm Membership » Version: 1.0.4

cpe:2.3:a:wclovers:wcfm_membership:1.0.4
Wclovers » Wcfm Membership » Version: 1.1.1

cpe:2.3:a:wclovers:wcfm_membership:1.1.1
Wclovers » Wcfm Membership » Version: 1.1.2

cpe:2.3:a:wclovers:wcfm_membership:1.1.2
Wclovers » Wcfm Membership » Version: 1.1.3

cpe:2.3:a:wclovers:wcfm_membership:1.1.3
Wclovers » Wcfm Membership » Version: 1.1.4

cpe:2.3:a:wclovers:wcfm_membership:1.1.4
Wclovers » Wcfm Membership » Version: 1.1.5

cpe:2.3:a:wclovers:wcfm_membership:1.1.5
Wclovers » Wcfm Membership » Version: 1.1.6

cpe:2.3:a:wclovers:wcfm_membership:1.1.6
Wclovers » Wcfm Membership » Version: 1.1.7

cpe:2.3:a:wclovers:wcfm_membership:1.1.7
Wclovers » Wcfm Membership » Version: 1.1.8

cpe:2.3:a:wclovers:wcfm_membership:1.1.8
Wclovers » Wcfm Membership » Version: 1.1.9

cpe:2.3:a:wclovers:wcfm_membership:1.1.9
Wclovers » Wcfm Membership » Version: 1.2.0

cpe:2.3:a:wclovers:wcfm_membership:1.2.0
Wclovers » Wcfm Membership » Version: 1.2.1

cpe:2.3:a:wclovers:wcfm_membership:1.2.1
Wclovers » Wcfm Membership » Version: 1.2.2

cpe:2.3:a:wclovers:wcfm_membership:1.2.2
Wclovers » Wcfm Membership » Version: 1.2.3

cpe:2.3:a:wclovers:wcfm_membership:1.2.3
Wclovers » Wcfm Membership » Version: 1.2.4

cpe:2.3:a:wclovers:wcfm_membership:1.2.4
Wclovers » Wcfm Membership » Version: 1.3.0

cpe:2.3:a:wclovers:wcfm_membership:1.3.0
Wclovers » Wcfm Membership » Version: 1.3.1

cpe:2.3:a:wclovers:wcfm_membership:1.3.1
Wclovers » Wcfm Membership » Version: 1.3.2

cpe:2.3:a:wclovers:wcfm_membership:1.3.2
Wclovers » Wcfm Membership » Version: 2.0.0

cpe:2.3:a:wclovers:wcfm_membership:2.0.0
Wclovers » Wcfm Membership » Version: 2.0.1

cpe:2.3:a:wclovers:wcfm_membership:2.0.1
Wclovers » Wcfm Membership » Version: 2.0.2

cpe:2.3:a:wclovers:wcfm_membership:2.0.2
Wclovers » Wcfm Membership » Version: 2.0.3

cpe:2.3:a:wclovers:wcfm_membership:2.0.3
Wclovers » Wcfm Membership » Version: 2.0.4

cpe:2.3:a:wclovers:wcfm_membership:2.0.4
Wclovers » Wcfm Membership » Version: 2.0.5

cpe:2.3:a:wclovers:wcfm_membership:2.0.5
Wclovers » Wcfm Membership » Version: 2.0.6

cpe:2.3:a:wclovers:wcfm_membership:2.0.6
Wclovers » Wcfm Membership » Version: 2.0.7

cpe:2.3:a:wclovers:wcfm_membership:2.0.7
Wclovers » Wcfm Membership » Version: 2.1.0

cpe:2.3:a:wclovers:wcfm_membership:2.1.0
Wclovers » Wcfm Membership » Version: 2.1.1

cpe:2.3:a:wclovers:wcfm_membership:2.1.1
Wclovers » Wcfm Membership » Version: 2.1.2

cpe:2.3:a:wclovers:wcfm_membership:2.1.2
Wclovers » Wcfm Membership » Version: 2.1.3

cpe:2.3:a:wclovers:wcfm_membership:2.1.3
Wclovers » Wcfm Membership » Version: 2.1.4

cpe:2.3:a:wclovers:wcfm_membership:2.1.4
Wclovers » Wcfm Membership » Version: 2.10.0

cpe:2.3:a:wclovers:wcfm_membership:2.10.0
Wclovers » Wcfm Membership » Version: 2.10.1

cpe:2.3:a:wclovers:wcfm_membership:2.10.1
Wclovers » Wcfm Membership » Version: 2.10.2

cpe:2.3:a:wclovers:wcfm_membership:2.10.2
Wclovers » Wcfm Membership » Version: 2.10.3

cpe:2.3:a:wclovers:wcfm_membership:2.10.3
Wclovers » Wcfm Membership » Version: 2.10.4

cpe:2.3:a:wclovers:wcfm_membership:2.10.4
Wclovers » Wcfm Membership » Version: 2.10.5

cpe:2.3:a:wclovers:wcfm_membership:2.10.5
Wclovers » Wcfm Membership » Version: 2.10.6

cpe:2.3:a:wclovers:wcfm_membership:2.10.6
Wclovers » Wcfm Membership » Version: 2.10.7

cpe:2.3:a:wclovers:wcfm_membership:2.10.7
Wclovers » Wcfm Membership » Version: 2.2.0

cpe:2.3:a:wclovers:wcfm_membership:2.2.0
Wclovers » Wcfm Membership » Version: 2.2.1

cpe:2.3:a:wclovers:wcfm_membership:2.2.1
Wclovers » Wcfm Membership » Version: 2.2.2

cpe:2.3:a:wclovers:wcfm_membership:2.2.2
Wclovers » Wcfm Membership » Version: 2.2.3

cpe:2.3:a:wclovers:wcfm_membership:2.2.3
Wclovers » Wcfm Membership » Version: 2.2.4

cpe:2.3:a:wclovers:wcfm_membership:2.2.4
Wclovers » Wcfm Membership » Version: 2.2.5

cpe:2.3:a:wclovers:wcfm_membership:2.2.5
Wclovers » Wcfm Membership » Version: 2.3.0

cpe:2.3:a:wclovers:wcfm_membership:2.3.0
Wclovers » Wcfm Membership » Version: 2.3.1

cpe:2.3:a:wclovers:wcfm_membership:2.3.1
Wclovers » Wcfm Membership » Version: 2.3.2

cpe:2.3:a:wclovers:wcfm_membership:2.3.2
Wclovers » Wcfm Membership » Version: 2.3.3

cpe:2.3:a:wclovers:wcfm_membership:2.3.3
Wclovers » Wcfm Membership » Version: 2.4.0

cpe:2.3:a:wclovers:wcfm_membership:2.4.0
Wclovers » Wcfm Membership » Version: 2.4.1

cpe:2.3:a:wclovers:wcfm_membership:2.4.1
Wclovers » Wcfm Membership » Version: 2.4.2

cpe:2.3:a:wclovers:wcfm_membership:2.4.2
Wclovers » Wcfm Membership » Version: 2.4.3

cpe:2.3:a:wclovers:wcfm_membership:2.4.3
Wclovers » Wcfm Membership » Version: 2.4.4

cpe:2.3:a:wclovers:wcfm_membership:2.4.4
Wclovers » Wcfm Membership » Version: 2.4.5

cpe:2.3:a:wclovers:wcfm_membership:2.4.5
Wclovers » Wcfm Membership » Version: 2.5.0

cpe:2.3:a:wclovers:wcfm_membership:2.5.0
Wclovers » Wcfm Membership » Version: 2.5.1

cpe:2.3:a:wclovers:wcfm_membership:2.5.1
Wclovers » Wcfm Membership » Version: 2.5.10

cpe:2.3:a:wclovers:wcfm_membership:2.5.10
Wclovers » Wcfm Membership » Version: 2.5.2

cpe:2.3:a:wclovers:wcfm_membership:2.5.2
Wclovers » Wcfm Membership » Version: 2.5.3

cpe:2.3:a:wclovers:wcfm_membership:2.5.3
Wclovers » Wcfm Membership » Version: 2.5.4

cpe:2.3:a:wclovers:wcfm_membership:2.5.4
Wclovers » Wcfm Membership » Version: 2.5.5

cpe:2.3:a:wclovers:wcfm_membership:2.5.5
Wclovers » Wcfm Membership » Version: 2.5.6

cpe:2.3:a:wclovers:wcfm_membership:2.5.6
Wclovers » Wcfm Membership » Version: 2.5.7

cpe:2.3:a:wclovers:wcfm_membership:2.5.7
Wclovers » Wcfm Membership » Version: 2.5.8

cpe:2.3:a:wclovers:wcfm_membership:2.5.8
Wclovers » Wcfm Membership » Version: 2.5.9

cpe:2.3:a:wclovers:wcfm_membership:2.5.9
Wclovers » Wcfm Membership » Version: 2.6.0

cpe:2.3:a:wclovers:wcfm_membership:2.6.0
Wclovers » Wcfm Membership » Version: 2.6.1

cpe:2.3:a:wclovers:wcfm_membership:2.6.1
Wclovers » Wcfm Membership » Version: 2.6.2

cpe:2.3:a:wclovers:wcfm_membership:2.6.2
Wclovers » Wcfm Membership » Version: 2.6.3

cpe:2.3:a:wclovers:wcfm_membership:2.6.3
Wclovers » Wcfm Membership » Version: 2.6.4

cpe:2.3:a:wclovers:wcfm_membership:2.6.4
Wclovers » Wcfm Membership » Version: 2.6.5

cpe:2.3:a:wclovers:wcfm_membership:2.6.5
Wclovers » Wcfm Membership » Version: 2.6.6

cpe:2.3:a:wclovers:wcfm_membership:2.6.6
Wclovers » Wcfm Membership » Version: 2.7.0

cpe:2.3:a:wclovers:wcfm_membership:2.7.0
Wclovers » Wcfm Membership » Version: 2.7.1

cpe:2.3:a:wclovers:wcfm_membership:2.7.1
Wclovers » Wcfm Membership » Version: 2.7.2

cpe:2.3:a:wclovers:wcfm_membership:2.7.2
Wclovers » Wcfm Membership » Version: 2.7.3

cpe:2.3:a:wclovers:wcfm_membership:2.7.3
Wclovers » Wcfm Membership » Version: 2.7.4

cpe:2.3:a:wclovers:wcfm_membership:2.7.4
Wclovers » Wcfm Membership » Version: 2.7.5

cpe:2.3:a:wclovers:wcfm_membership:2.7.5
Wclovers » Wcfm Membership » Version: 2.7.6

cpe:2.3:a:wclovers:wcfm_membership:2.7.6
Wclovers » Wcfm Membership » Version: 2.8.0

cpe:2.3:a:wclovers:wcfm_membership:2.8.0
Wclovers » Wcfm Membership » Version: 2.8.1

cpe:2.3:a:wclovers:wcfm_membership:2.8.1
Wclovers » Wcfm Membership » Version: 2.8.2

cpe:2.3:a:wclovers:wcfm_membership:2.8.2
Wclovers » Wcfm Membership » Version: 2.8.3

cpe:2.3:a:wclovers:wcfm_membership:2.8.3
Wclovers » Wcfm Membership » Version: 2.8.4

cpe:2.3:a:wclovers:wcfm_membership:2.8.4
Wclovers » Wcfm Membership » Version: 2.8.5

cpe:2.3:a:wclovers:wcfm_membership:2.8.5
Wclovers » Wcfm Membership » Version: 2.8.6

cpe:2.3:a:wclovers:wcfm_membership:2.8.6
Wclovers » Wcfm Membership » Version: 2.9.0

cpe:2.3:a:wclovers:wcfm_membership:2.9.0
Wclovers » Wcfm Membership » Version: 2.9.1

cpe:2.3:a:wclovers:wcfm_membership:2.9.1
Wclovers » Wcfm Membership » Version: 2.9.10

cpe:2.3:a:wclovers:wcfm_membership:2.9.10
Wclovers » Wcfm Membership » Version: 2.9.2

cpe:2.3:a:wclovers:wcfm_membership:2.9.2
Wclovers » Wcfm Membership » Version: 2.9.3

cpe:2.3:a:wclovers:wcfm_membership:2.9.3
Wclovers » Wcfm Membership » Version: 2.9.4

cpe:2.3:a:wclovers:wcfm_membership:2.9.4
Wclovers » Wcfm Membership » Version: 2.9.5

cpe:2.3:a:wclovers:wcfm_membership:2.9.5
Wclovers » Wcfm Membership » Version: 2.9.6

cpe:2.3:a:wclovers:wcfm_membership:2.9.6
Wclovers » Wcfm Membership » Version: 2.9.7

cpe:2.3:a:wclovers:wcfm_membership:2.9.7
Wclovers » Wcfm Membership » Version: 2.9.8

cpe:2.3:a:wclovers:wcfm_membership:2.9.8
Wclovers » Wcfm Membership » Version: 2.9.9

cpe:2.3:a:wclovers:wcfm_membership:2.9.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4940

Products

Pricing

Contact Us