CVE-2026-93343

The MarketKing WordPress plugin (Multivendor Marketplace for WooCommerce) before version 2.1.72 contains a missing authorization flaw in the marketking_admin_vendors_ajax AJAX action. Due to absent capability checks, any authenticated user with subscriber-level access or higher can send a crafted...