Skip to content
Threat Feed
Subscribe

Product

WCFM Marketplace – Multivendor Marketplace for WooCommerce (<= 3.8.2)

1 brief RSS
high advisory

SQL Injection Vulnerability in WCFM Marketplace Plugin

The WCFM Marketplace plugin for WordPress is vulnerable to unauthenticated SQL injection via the wcfmmp_user_location_lng parameter, allowing attackers to extract sensitive database information.

WCFM Marketplace – Multivendor Marketplace for WooCommerce
1r 1t 1c