CVE-2026-3688 - WCFM - WooCommerce Multivendor Membership <= 2.11.10 - Insecure Direct Object Reference to Limited Privilege Escalation via User Role Overwrite
CVE ID :CVE-2026-3688 Published : July 8, 2026, 12:17 p.m. | 57 minutes ago Description :The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.11.10. This is due...