← All advisories

Unrated severityNVD Advisory· Published Jun 25, 2026· Updated Jun 25, 2026

WordPress WC Vendors Marketplace plugin <= 2.6.8 - SQL Injection vulnerability

CVE-2026-54838

Description

Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.

Affected products

1

WordPress/WC Vendors Marketplacellm-fuzzy
Range: <=2.6.8

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/wc-vendors/vulnerability/wordpress-wc-vendors-marketplace-plugin-2-6-8-sql-injection-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.