WC Lovers WCFM Marketplace vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting WC Lovers WCFM Marketplace: 4 record(s), with affected versions and fixes.

CVE-2026-83562 Medium · 6.5 CWE-79 Sep 2, 2026

WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in WCFM Marketplace <= 3.8.2 versions.

CVE-2026-81286 Critical · 9.3 CWE-89 Sep 2, 2026

WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions.

CVE-2025-63029 High · 7.6 CWE-89 Apr 15, 2026

WordPress WCFM Marketplace plugin <= 3.7.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows SQL Injection.This issue affects WCFM Marketplace: from n/a through <= 3.7.1.

CVE-2025-64631 Medium · 4.9 CWE-862 Dec 16, 2025

WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Marketplace: from n/a through <= 3.7.1.