CVE Catalog
CVE-2026-54838
HighCVSS 8.5Summary
Versions of WC Vendors Marketplace up to 2.6.8 are vulnerable to SQL Injection attacks by subscribers.
Risk Assessment
An attacker could gain access to sensitive data in the database, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to the latest version of WC Vendors Marketplace to mitigate this vulnerability.
Original NVD description (English source)
Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.