TI-2026-63300 CVE-2026-94080 · GHSA-x6r6-6m8w-8j6g
WordPress MarketKing plugin <= 2.1.70 - Broken Access Control vulnerability
Priority LOW 30
Unauthenticated Broken Access Control in MarketKing <= 2.1.70 versions.
Vulnerabilities
10 records
TI-2026-62936 CVE-2026-93344 · GHSA-mr7p-65vm-9479
MarketKing < 2.1.72 Missing Authorization via marketking_get_page_content AJAX
Priority LOW 32
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_get_page_content AJAX action that allows authenticated attackers with subscriber-level access or higher to ac…
TI-2026-62935 CVE-2026-93343 · GHSA-494w-928f-793q
MarketKing < 2.1.72 Missing Authorization via marketking_admin_vendors_ajax
Priority LOW 31
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_admin_vendors_ajax AJAX action that allows authenticated attackers with subscriber-level access or higher to…
TI-2026-62934 CVE-2026-93342 · GHSA-xxjc-pqh8-8mgh
MarketKing < 2.1.72 Missing Authorization via marketking_duplicate_product AJAX
Priority LOW 24
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_duplicate_product AJAX action that allows authenticated attackers with subscriber-level access or higher to d…
TI-2026-62933 CVE-2026-93341 · GHSA-j68h-v872-356w
MarketKing < 2.1.72 Missing Authorization via marketking_send_refund AJAX
Priority LOW 24
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_send_refund AJAX action that allows authenticated attackers with subscriber-level access or higher to create…
TI-2026-21814 CVE-2026-27399 · GHSA-4j53-6r5m-fjwf
WordPress MarketKing plugin <= 2.1.40 - Broken Access Control vulnerability
Priority LOW 30
Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions.
TI-2025-36362 CVE-2025-58702 · GHSA-pq4v-chpp-27cq
WordPress MarketKing Plugin <= 2.0.92 - Cross Site Scripting (XSS) Vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebWizards MarketKing marketking-multivendor-marketplace-for-woocommerce allows Stored XSS.This issue affects MarketKi…
TI-2024-14758 CVE-2024-22157 · GHSA-w8v2-xq2g-x7q2
WordPress SalesKing plugin <= 1.6.15 - Unauthenticated Privilege Escalation vulnerability
Priority MEDIUM 50
Improper Privilege Management vulnerability in WebWizards SalesKing allows Privilege Escalation.This issue affects SalesKing: from n/a through 1.6.15.
TI-2023-02929 CVE-2023-3126 · GHSA-vvq2-pgmh-555r
B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Information Disclosure
Priority LOW 21
The B2BKing plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'b2bkingdownloadpricelist' function in versions up to, and including, 4.6.00.
TI-2023-02928 CVE-2023-3125 · GHSA-q9vf-7xvp-fg52
B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Price Modification
Priority LOW 30
The B2BKing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'b2bking_save_price_import' function in versions up to, and including, 4.6.00.