WCFM Marketplace
WC Lovers
Developer
3.8.3
Latest version
10,000
Installations
No date
Last updated
Vulnerability history
0 present
13 patched
4 Mitigation rules
- SQL Injection vulnerability<= 3.8.14 days ago
- Cross Site Scripting (XSS) vulnerability<= 3.8.24 days ago
- Unauthenticated Refund Request Creation on Guest Orders vulnerability< 3.8.228/08/2026
- Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR vulnerability< 3.8.121/08/2026
- Authenticated (Vendor+) Stored Cross-Site Scripting vulnerability<= 3.7.310/07/2026
- SQL Injection vulnerability<= 3.7.215/04/2026
- Insecure Direct Object Reference to Unauthenticated Arbitrary Refund Request Creation vulnerability<= 3.7.009/02/2026
- Broken Access Control vulnerability<= 3.7.315/12/2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 3.6.1116/09/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 3.6.227/11/2023
- Missing Authorization vulnerability<= 3.4.1106/04/2023
- Cross-Site Request Forgery vulnerability<= 3.4.1206/04/2023
- Unauthenticated SQL Injection (SQLi) vulnerability<= 3.4.1122/11/2021