CVE-2026-84756

HighCVSS 7.1/10Last modified Sep 7, 2026

Description

Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Weakness enumeration

CWE-266

Affected software

No affected versions have been published.

Timeline

Published
Sep 3, 2026
Last modified
Sep 7, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-847578.2Unauthenticated Settings Change in WP Compress <= 7.21.28 versions.CVE-2026-847586.5Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions.CVE-2026-847597.1Unauthenticated Cross Site Request Forgery (CSRF) in Activity Log <= 2.13.1 versions.CVE-2026-84769.9IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDCVE-2026-847605.3Unauthenticated Broken Access Control in Ultimate Gift Cards For WooCommerce <= 3.2.9 versions.CVE-2026-847617.2Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.CVE-2026-847625.3Unauthenticated Bypass Vulnerability in WP EasyPay <= 4.5.3 versions.CVE-2026-847637.1Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.CVE-2026-847648.8Unauthenticated Cross Site Request Forgery (CSRF) in Simply Schedule Appointments <= 1.6.12.23 versions.CVE-2026-847657.1Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.CVE-2026-847665.9Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.CVE-2026-847675.3Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.
CVE-2026-84756: High severity, CVSS 7.1 | Vulnix