~ / search / CVE-2026-62000

CVE-2026-62000

WordPress WCFM Marketplace plugin <= 3.8.2 - Broken Access Control vulnerability

State: published CNA: Patchstack CVSS 3.1 7.5 High NVD: deferred

Description

Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Marketplace: from n/a through 3.8.2.

Affected products

VendorProductVersions
WC Lovers WCFM Marketplace ≤3.8.2

References

External links from the record. They lead to third-party sites.