CVE-2026-14557

The SoftMarket — Digital Marketplace WordPress plugin (≤1.0.0) contains an authentication-token validation flaw in the email-verification flow. An unauthenticated attacker can obtain a valid session as any verified user by supplying only that user’s ID, enabling account takeover via session imper...

EUVD-2026-52171

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauthenticated attackers to obtain a valid session as any verified user by supplying only that user's ID...