agentprime: wclovers-wcfm-marketplace-multivendor-marketplace-for-woocommerceEvery new CVE for wclovers-wcfm-marketplace-multivendor-marketplace-for-woocommerce.https://agentprime.io/CVE-2026-18442: WCFM Marketplace <= 3.8.2 - Unauthenticated SQL Injection via 'wcfmmp_user_location_lat' / 'wcfmmp_user_location_lng' Parameterhttps://agentprime.io/advisories/CVE-2026-18442/https://agentprime.io/advisories/CVE-2026-18442/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 07:39:59 GMTCVECVE-2026-12126: WCFM Marketplace <= 3.7.3 - Authenticated (Vendor+) Stored Cross-Site Scripting via Attachment 'post_title'https://agentprime.io/advisories/CVE-2026-12126/https://agentprime.io/advisories/CVE-2026-12126/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jul 2026 05:35:48 GMTCVECVE-2026-1722: WCFM Marketplace <= 3.7.0 - Insecure Direct Object Reference to Unauthenticated Arbitrary Refund Request Creationhttps://agentprime.io/advisories/CVE-2026-1722/https://agentprime.io/advisories/CVE-2026-1722/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 07:27:00 GMTCVECVE-2023-4960: WCFM Marketplace <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2023-4960/https://agentprime.io/advisories/CVE-2023-4960/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jan 2024 08:33:09 GMTCVECVE-2022-4936: WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgeryhttps://agentprime.io/advisories/CVE-2022-4936/https://agentprime.io/advisories/CVE-2022-4936/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Apr 2023 17:27:54 GMTCVECVE-2022-4935: WCFM Marketplace <= 3.4.11 - Missing Authorizationhttps://agentprime.io/advisories/CVE-2022-4935/https://agentprime.io/advisories/CVE-2022-4935/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Apr 2023 17:27:39 GMTCVE