Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
drfuri records in CISA KEVNo drfuri vulnerabilities are listed in CISA KEV.
Priority LOW 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury -…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00175 · Published 2026-10-10 · No fix listed CWE-79
Priority LOW 20
Subscriber Broken Access Control in Martfury - WooCommerce Marketplace WordPress Theme <= 3.2.8 versions.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00254 · Published 2026-07-02 · No fix listed CWE-862
