Cpe:2.3:a:wcfm:marketplace_multivendor_marketplace_for_woocommerce:*:*:*:*:*:*:*:*

The WCFM Marketplace plugin for WordPress is vulnerable to unauthenticated SQL injection via the wcfmmp_user_location_lng parameter, allowing attackers to extract sensitive database information.