{"affected":[{"defaultStatus":"unaffected","product":"WCFM Membership","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"2.12.1","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-12967","cwes":["CWE-269"],"description":"The WCFM Membership  WordPress plugin before 2.12.1 does not verify that payment was made before completing a paid membership, allowing any authenticated Subscriber/Customer to activate a paid vendor membership for free and gain the marketplace vendor role.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/37e7aff5-19fd-480c-87f5-e1863a99d8b6/"}],"kev":null,"metrics":[],"modifiedAt":1793944826552,"publishedAt":1793944826552,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/37e7aff5-19fd-480c-87f5-e1863a99d8b6/"}],"remediation":[],"revision":"7cf991b5c19eb77dd88664588ff0bffd8adb6ea7e5e4742133cd1a30e3121f60","sources":[{"modifiedAt":1793944826552,"name":"CNA: WPScan","retrievedAt":1793945338180,"url":"https://www.cve.org/CVERecord?id=CVE-2026-12967"}],"ssvc":null,"status":"published","title":"WCFM Membership < 2.12.1 - Subscriber+ Payment Verification Bypass","updatedAt":1793945338180}