What’s Vulnerable › Products

WCFM Marketplace vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your WCFM Marketplace version is affected

Latest WCFM Marketplace vulnerabilities

• CVE-2026-77701 — WCFM Marketplace < 3.8.2 - Unauthenticated Refund Request Creation on Guest Orders (CVSS 5.3)
• CVE-2026-14196 — WCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR (CVSS 4.3)