Skip to content
PluginCanary

WCFM Membership

WCFM Membership - WooCommerce Memberships for Multivendor Marketplace
by WC Lovers · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 2 Nov 2026, 8 releases in 24 months, no unpatched vulnerabilities.

89/ 100 Canary Score
Sub-scores for WCFM Membership
Ownership100
Maintenance100
Security70
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WCFM Membership still maintained?
Yes. Last release 2 Nov 2026, 8 releases in the last 24 months. 2 Nov 2026 · wordpress.org
Who owns WCFM Membership, and has it changed hands?
No change recorded. Main committer wclovers since Dec 2017. 4 Nov 2026 · SVN log
Was WCFM Membership removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WCFM Membership safe?
9 known vulnerabilities, all fixed (latest in 2.12.0). Not on the exploited list. 4 Sep 2026 · Wordfence Intelligence
Is the latest WCFM Membership update safe to install?
No ownership change before 2.12.1. No one-star spike after it. 2 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
wclovers14 Dec 2017 to 2 Nov 2026, 177 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
2 days ago
Releases, 24 months
8
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for WCFM Membership
Q1 20240
Q2 20242
Q3 20240
Q4 20240
Q1 20251
Q2 20250
Q3 20251
Q4 20251
Q1 20261
Q2 20262
Q3 20261
Q4 20261

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.0.

Average rating per quarter for WCFM Membership
Q1 20245.0
Q1 20251.0
Q3 20255.0

Average rating stayed at 5.0 between Q1 2024 and Q3 2025.

Rating distribution
5 star18
4 star0
3 star0
2 star2
1 star5
Latest low reviews

Security record

5 vulnerabilities in 24 months (9 on record), all patched (latest fixed in 2.12.0).

Show 9 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
4 Sep 2026WCFM Membership - WooCommerce Memberships for Multivendor Marketplace <= 2.11.11 - Missing Authorization5.3<= 2.11.112.12.0Patched before disclosure
2 Sep 2026WCFM Membership - WooCommerce Memberships for Multivendor Marketplace <= 2.11.11 - Authenticated (Subscriber+) Privilege Escalation6.3<= 2.11.112.12.0Patched before disclosure
7 Jul 2026WCFM - WooCommerce Multivendor Membership <= 2.11.10 - Insecure Direct Object Reference to Limited Privilege Escalation via User Role Overwrite8.1<= 2.11.102.11.11Patched before disclosure
29 May 2026WCFM Membership - WooCommerce Memberships for Multivendor Marketplace <= 2.11.10 - Missing Authorization5.3<= 2.11.102.11.11Patched before disclosure
9 Feb 2026WCFM Membership - WooCommerce Memberships for Multivendor Marketplace <= 2.11.8 - Insecure Direct Object Reference to Update Membership Payment4.3<= 2.11.82.11.9Patched before disclosure
3 May 2023WCFM Membership - WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Change9.8<= 2.10.72.11.0Patched before disclosure
5 Apr 2023WCFM Membership <= 2.10.0 - Missing Authorization7.3<= 2.10.02.10.1Patched before disclosure
5 Apr 2023WCFM Membership <= 2.9.10 - Cross-Site Request Forgery6.3<= 2.9.102.10.0Patched before disclosure
5 Apr 2023WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation9.8<= 2.10.02.10.1Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

50% of 2 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WCFM Membership
4 May 2026520
11 May 20261,184
18 May 20261,442
25 May 20261,631
1 Jun 20261,296
8 Jun 2026786
15 Jun 2026716
22 Jun 2026594
29 Jun 2026548
6 Jul 2026726
13 Jul 2026576
20 Jul 2026646
27 Jul 2026578
3 Aug 2026649
10 Aug 2026573
17 Aug 2026588
24 Aug 20263,077
31 Aug 20263,739
7 Sep 20261,257
14 Sep 20261,222
21 Sep 2026983
28 Sep 2026784
5 Oct 2026769
12 Oct 2026733
19 Oct 2026889
26 Oct 2026823
2 Nov 20261,912

Weekly downloads over the last 4 weeks are 1% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version2.12.1
AuthorWC Lovers
Added14 Dec 2017
Last updated2 Nov 2026
Active installs10,000+
Requires WordPress5.5
Tested up to7.1.4
Requires PHP5.6
CategoryE-commerce & Shopping
Tagsmembers, multi vendor, subscription, woocommerce membership, multivendor marketplace

Other plugins by this author: WCFM - Frontend Manager for WooCommerce, WCFM Marketplace - Multivendor Marketplace for WooCommerce, WCFM - WCFM Marketplace integrate Elementor, WCFM - Multivendor Marketplace REST API for WooCommerce, WCFM - Direct PayPal Pay for WooCommerce Multivendor Marketplace, Migrate to WooCommerce Multivendor Marketplace

Questions

Is WCFM Membership still maintained?

Yes. Last release 2 Nov 2026, 8 releases in the last 24 months.

Who owns WCFM Membership, and has it changed hands?

No change recorded. Main committer wclovers since Dec 2017.

Was WCFM Membership removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WCFM Membership safe?

9 known vulnerabilities, all fixed (latest in 2.12.0). Not on the exploited list.

Is the latest WCFM Membership update safe to install?

No ownership change before 2.12.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue