Wc Lovers Wcfm Marketplace
5 CVEs affecting Wc Lovers Wcfm Marketplace. Latest disclosed: 2026-09-02. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-81286 | Critical | 9.3 | 2026-09-02 | Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions. |
CVE-2025-63029 | High | 7.6 | 2026-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace all… |
CVE-2024-44009 | High | 7.1 | 2024-09-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace all… |
CVE-2026-83562 | Medium | 6.5 | 2026-09-02 | Contributor Cross Site Scripting (XSS) in WCFM Marketplace <= 3.8.2 versions. |
CVE-2025-64631 | Medium | 4.9 | 2025-12-16 | Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security L… |