WC Lovers WooCommerce Multivendor Marketplace – REST API vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting WC Lovers WooCommerce Multivendor Marketplace – REST API: 1 record(s), with affected versions and fixes.

CVE-2026-39794 High · 7.5 CWE-862 Oct 6, 2026

WordPress WooCommerce Multivendor Marketplace – REST API plugin <= 1.6.3 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.