VendorsWC Loverswcfm_marketplaceall versions
Vulnerabilities

WC Lovers WCFM Marketplace

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2022-4935
WCFM Marketplace <= 3.4.11 - Missing Authorization
Published 2023-04-05 · Modified
8.8EPSS 0.007
CVE-2022-4936
WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery
Published 2023-04-05 · Modified
8.8EPSS 0.002
CVE-2024-44009
WordPress WCFM Marketplace <= 3.6.11 - Reflected Cross Site Scripting (XSS) vulnerability
Published 2024-09-17 · Modified
7.1EPSS 0.003
CVE-2023-4960
WCFM Marketplace <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-01-11 · Modified
6.4EPSS 0.004