Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: webwizardsdev Clear all filters
TI-2024-12560 CVE-2024-13519 · GHSA-75qq-35g6-q528

Cross-site scripting in webwizardsdev MarketKing — Ultimate WooCommerce Multivendor…

Priority LOW 20

The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's settings in all versions up to, and including, 1.9.80 due to insuffici…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00271 Published 2025-01-18 No fix listed CWE-79
TI-2024-11517 CVE-2024-12413 · GHSA-chv6-p335-2c63

MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.0.00 - Missing Authorization

Priority LOW 30

The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions like 'marketking_delete_team_member',…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00398 Published 2024-12-25 No fix listed CWE-862