CVE-2022-4939
WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation
CRITICAL 9.8EPSS 2.1%
THe WCFM Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 2.10.0, due to a missing capability check on the wp_ajax_nopriv_wcfm_ajax_controller AJAX action that controls membership settings. This makes it possible for unauthenticated attackers to modify the membership registration form in a way that allows them to set the role for registration to that of any user including administrators. Once configured, the attacker can then register as an administrator.
- Affected
- wclovers · WCFM Membership – WooCommerce Memberships for Multivendor Marketplace
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 2.10% chance of exploitation in the next 30 days, 81st percentile
- Published
- 2023-04-05
- Updated
- 2026-04-08
Proof-of-concept exploits (1)
- BaconCriCRi/PoC-CVE-2022-4939-0★ · 2023-04-06
Security advisories
- https://www.wordfence.com/threat-intel/vulnerabilities/id/0870de2d-bca5-4d57-a07f-877a416…
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2633191%…