Wcfm Marketplace vulnerabilities

2 known vulnerabilities in Wcfm Marketplace from Wclovers. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WCFM Marketplace – Multivendor Marketplace for…: Cross-Site Request Forgery

  CVE-2022-4936Apr 5, 2023Wclovers

  The WCFM Marketplace plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4.11 due to missing nonce checks on various AJAX actions. This makes it possible for unauthenticated attackers to perform a wide variety o

• 8.8 High severity

  WCFM Marketplace – Multivendor Marketplace for…: Missing Authorization

  CVE-2022-4935Apr 5, 2023Wclovers

  The WCFM Marketplace plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 3.4.11 due to missing capability checks on various AJAX actions. This makes it possible for authenticated attackers, with