← CVE Intelligence

CVE-2026-39794

WordPress WooCommerce Multivendor Marketplace – REST API plugin <= 1.6.3 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.

Affected (CNA)

Vendor / productVersions
WC Lovers / WooCommerce Multivendor Marketplace – REST APIaffected n/a through 1.6.3

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.