Wclovers Wcfm Marketplace – Multivendor Marketplace For Woocommerce vulnerabilities
- wclovers wcfm marketplace – multivendor marketplace for woocommerceWCFM Marketplace <= 3.8.2 - Unauthenticated SQL Injection via 'wcfmmp_user_location_lat' / 'wcfmmp_user_location_lng' Parameter7.5 High
- wclovers wcfm marketplace – multivendor marketplace for woocommerceWCFM Marketplace <= 3.7.3 - Authenticated (Vendor+) Stored Cross-Site Scripting via Attachment 'post_title'6.4 Medium
- wclovers wcfm marketplace – multivendor marketplace for woocommerceWCFM Marketplace <= 3.7.0 - Insecure Direct Object Reference to Unauthenticated Arbitrary Refund Request Creation5.3 Medium
- wclovers wcfm marketplace, wcfm marketplace – multivendor marketplace for woocommerce +1 moreWCFM Marketplace <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- wclovers wcfm marketplace, wcfm marketplace – multivendor marketplace for woocommerce +1 moreWCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery6.3 Medium
- wclovers wcfm marketplace, wcfm marketplace – multivendor marketplace for woocommerce +1 moreWCFM Marketplace <= 3.4.11 - Missing Authorization8.8 High