Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: WCVendors Clear all filters
TI-2026-12920 CVE-2026-15351 · GHSA-chvp-27p2-w8xj

WC Vendors <= 2.7.0 - Authenticated (Shop Manager+) SQL Injection via 'status' Parameter

Priority LOW 23

The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to generic SQL Injection via the 'status' parameter in all versions up to, and including, 2.7.0 due to…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00483 Published 2026-08-16 No fix listed CWE-89
TI-2025-31311 CVE-2025-49263 · GHSA-f4w9-fc64-c5xw

WordPress WC Vendors Marketplace plugin <= 2.5.6 - SQL Injection Vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WCVendors WC Vendors Marketplace wc-vendors allows Blind SQL Injection.This issue affects WC Vendors Marketplace: from…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00435 Published 2025-06-06 No fix listed CWE-89
TI-2023-26190 CVE-2023-48327 · GHSA-8ghf-qwf8-v85m

WordPress WC Vendors Marketplace Plugin <= 2.4.7 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Vendors WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors.This issue affects WC Vendo…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00725 Published 2023-12-19 No fix listed CWE-89
TI-2023-00068 CVE-2023-0072 · GHSA-59fh-9f2q-48c9

WC Vendors Marketplace < 2.4.5 - Contributor+ Stored XSS

Priority MEDIUM 58

The WC Vendors Marketplace WordPress plugin before 2.4.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00685 Published 2023-02-06 Fixed in 2.4.5