A vulnerability was found in WCFM Membership Plugin up to 2.11.8 on WordPress and classified as problematic. Affected is the function
WCFMvm_Memberships_Payment_Controller::processing. Executing a manipulation can lead to improper control of resource identifiers.
This vulnerability is tracked as CVE-2025-15147. The attack can be launched remotely. No exploit exists.
