Skip to content
Noroxi

WC Vendors Marketplace

wc-vendors · plugin

Known security vulnerabilities for WC Vendors Marketplace. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

latest Sep 17, 2026

Vulnerabilities

  • CVE-2026-54838

    WordPress WC Vendors Marketplace plugin <= 2.6.8 - SQL Injection vulnerability

    High 8.5

  • CVE-2026-66625

    WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability

    High 7.6

  • CVE-2025-49263

    WordPress WC Vendors Marketplace plugin <= 2.5.6 - SQL Injection Vulnerability

    High 7.6

  • CVE-2023-48327

    WordPress WC Vendors Marketplace Plugin <= 2.4.7 is vulnerable to SQL Injection

    High 7.2

  • CVE-2026-15351

    WC Vendors <= 2.7.0 - Authenticated (Shop Manager+) SQL Injection via 'status' Parameter

    Medium 4.9

  • CVE-2025-12130

    WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.6.4 - Cross-Site Request Forgery to Vendor Product Deletion

    Medium 4.3

← Back to directory