42 matches found
CVE-2026-66625
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
EUVD-2026-81507
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
CVE-2026-66625 WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
CVE-2026-66625 WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
CVE-2026-66625
WC Vendors Marketplace , a WordPress plugin, is vulnerable to an administrator-level SQL injection in versions
WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WC Vendors Marketplace versions = 2.7.2.1...
CVE-2026-66625: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
PT-2026-94273
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
WordPress WC Vendors plugin < 2.7.2.1 - Order Shipment Status Change vulnerability
Order Shipment Status Change vulnerability discovered by Usama Arshad in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...
WordPress WC Vendors plugin < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status Change vulnerability
Vendor+ Cross-Vendor Order Shipment Status Change vulnerability discovered by Bhaveshkumar Parmar in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...
WordPress WC Vendors plugin < 2.7.2.1 - Vendor+ Cross-Vendor Product and Arbitrary Post Modification vulnerability
Vendor+ Cross-Vendor Product and Arbitrary Post Modification vulnerability discovered by Usama Arshad in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...
CVE-2026-54838
Subscriber SQL Injection in WC Vendors Marketplace = 2.6.8 versions...
CVE-2026-54838 WordPress WC Vendors Marketplace plugin <= 2.6.8 - SQL Injection vulnerability
Subscriber SQL Injection in WC Vendors Marketplace = 2.6.8 versions...
CVE-2026-54838
CVE-2026-54838 affects WordPress WC Vendors Marketplace plugin up to version 2.6.8. The description documents a subscriber SQL injection vulnerability (no explicit root cause details provided). CVSS 3.1 base score 8.5 (HIGH) with network attack vector, low attack complexity, privileges required: ...
EUVD-2026-39368
Subscriber SQL Injection in WC Vendors Marketplace = 2.6.8 versions...
CVE-2026-54838 WordPress WC Vendors Marketplace plugin <= 2.6.8 - SQL Injection vulnerability
Subscriber SQL Injection in WC Vendors Marketplace = 2.6.8 versions...
CVE-2026-54838
Subscriber SQL Injection in WC Vendors Marketplace = 2.6.8 versions...
PT-2026-52417
Subscriber SQL Injection in WC Vendors Marketplace = 2.6.8 versions...