WordPress Plugin Vulnerabilities
WC Marketplace < 4.1.4 - Missing Authorization
Description
The WC Marketplace plugin for WordPress is vulnerable to unauthorized access due to a missing capability check in versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.
Affects Plugins
Fixed in 4.1.4 References
Classification
Type
NO AUTHORISATION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
LVT-tholv2k
Verified
No
WPVDB ID
Timeline
Publicly Published
2024-04-05 (about 2 years ago)
Added
2024-04-11 (about 2 years ago)
Last Updated
2024-04-11 (about 2 years ago)
WPScan 