VYPR

Wcfm Marketplace Rest API

by WordPress

Source repositories

CVEs (1)

  • CVE-2025-1311MedMar 22, 2025
    risk 0.35cvss 6.5epss 0.00

    The WooCommerce Multivendor Marketplace – REST API plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in the update_delivery_status() function in all versions up to, and including, 1.6.2 due to insufficient escaping on the user supplied parameter and…