Veille CVE

Recherche « Unknown WCFM Marketplace »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown WCFM Marketplace » ✕
  1. CVE-2026-77701 5.3 Moyenne

    Unknown WCFM Marketplace

    The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated users to create refund requests against any guest checkout order on the site.

  2. CVE-2026-14196 4.3 Moyenne

    Unknown WCFM Marketplace

    The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before allowing it to be unapproved or deleted, allowing any vendor to modify or permanently delete reviews belonging to other vendors' stores.