CVE Intelligence

Vulnerabilidades do WC Lovers WCFM Marketplace

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam WC Lovers WCFM Marketplace: 4 registro(s), com versões afetadas e correções.

CVE-2026-83562 Média · 6.5 CWE-79 02/09/2026
WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in WCFM Marketplace <= 3.8.2 versions.
CVE-2026-81286 Crítica · 9.3 CWE-89 02/09/2026
WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions.
CVE-2025-63029 Alta · 7.6 CWE-89 15/04/2026
WordPress WCFM Marketplace plugin <= 3.7.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows SQL Injection.This issue affects WCFM Marketplace: from n/a through <= 3.7.1.
CVE-2025-64631 Média · 4.9 CWE-862 16/12/2025
WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Marketplace: from n/a through <= 3.7.1.