PT-2026-96732

Name of the Vulnerable Software and Affected Versions MarketKing plugin for WordPress versions prior to 2.1.72 Description An authorization flaw exists in the marketking send refund AJAX action. Authenticated users with subscriber-level access or higher can create fraudulent refund requests for a...