Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: WebWizards MarketKing 2.1.72 Clear all filters
TI-2026-62936 CVE-2026-93344 · GHSA-mr7p-65vm-9479

MarketKing < 2.1.72 Missing Authorization via marketking_get_page_content AJAX

Priority LOW 32

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_get_page_content AJAX action that allows authenticated attackers with subscriber-level access or higher to ac…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00426 Published 2026-09-22 Fixed in 2.1.72 CWE-862
TI-2026-62935 CVE-2026-93343 · GHSA-494w-928f-793q

MarketKing < 2.1.72 Missing Authorization via marketking_admin_vendors_ajax

Priority LOW 31

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_admin_vendors_ajax AJAX action that allows authenticated attackers with subscriber-level access or higher to…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00402 Published 2026-09-22 Fixed in 2.1.72 CWE-862
TI-2026-62934 CVE-2026-93342 · GHSA-xxjc-pqh8-8mgh

MarketKing < 2.1.72 Missing Authorization via marketking_duplicate_product AJAX

Priority LOW 24

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_duplicate_product AJAX action that allows authenticated attackers with subscriber-level access or higher to d…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00319 Published 2026-09-22 Fixed in 2.1.72 CWE-862
TI-2026-62933 CVE-2026-93341 · GHSA-j68h-v872-356w

MarketKing < 2.1.72 Missing Authorization via marketking_send_refund AJAX

Priority LOW 24

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_send_refund AJAX action that allows authenticated attackers with subscriber-level access or higher to create…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00325 Published 2026-09-22 Fixed in 2.1.72 CWE-862