Advisories · Technology
wcvendors WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors.
Every CVE that names wcvendors WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
WC Vendors <= 2.7.0 - Authenticated (Shop Manager+) SQL Injection via 'status' Parameter
- wcvendors WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors
- SQL injection
- CVSS 4.3 Medium
WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.6.4 - Cross-Site Request Forgery to Vendor Product Deletion
- wcvendors WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors
- Cross-site request forgery (CSRF)