← All advisories

High severity7.5NVD Advisory· Published Oct 6, 2026

CVE-2026-39794

CVE-2026-39794

Description

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Woocommerce Multivendor Marketplacellm-fuzzy
Range: <=1.6.3

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/wcfm-marketplace-rest-api/vulnerability/wordpress-woocommerce-multivendor-marketplace-rest-api-plugin-1-6-3-broken-access-control-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.