WCFM Marketplace WordPress plugin missing authorization checks
A store seller-management plugin lets people use features they should not reach.
Summary
The WCFM Marketplace WordPress plugin lacks authorization checks, so users can reach functions that should be restricted. Versions 3.8.2 and older are affected.
Affected when
- WCFM Marketplace 3.8.2 or older
What to do
Update to version 3.8.3 or newer. Check that the plugin runs 3.8.3 or newer and read the vendor's advisory.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen