Vendor
WebWizards
8 known vulnerabilities.
Products
7 results · Clear filters · Feed
-
Medium 5.3
WordPress MarketKing plugin <= 2.1.70 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in MarketKing <= 2.1.70 versions.
-
Medium 6.5
MarketKing < 2.1.72 Missing Authorization via marketking_get_page_content AJAX
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_get_page_content AJAX action that allows authenticated attackers with subscriber-level access or higher to access arbitrary vendor administrator pan…
-
Medium 6.5
MarketKing < 2.1.72 Missing Authorization via marketking_admin_vendors_ajax
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_admin_vendors_ajax AJAX action that allows authenticated attackers with subscriber-level access or higher to retrieve the complete vendor directory …
-
Medium 5.4
MarketKing < 2.1.72 Missing Authorization via marketking_duplicate_product AJAX
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_duplicate_product AJAX action that allows authenticated attackers with subscriber-level access or higher to duplicate any vendor's product by supply…
-
Medium 4.3
MarketKing < 2.1.72 Missing Authorization via marketking_send_refund AJAX
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_send_refund AJAX action that allows authenticated attackers with subscriber-level access or higher to create refund requests against any order by su…
-
Medium 5.3
WordPress MarketKing plugin <= 2.1.40 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions.
-
Medium 6.5
WordPress MarketKing Plugin <= 2.0.92 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebWizards MarketKing marketking-multivendor-marketplace-for-woocommerce allows Stored XSS.This issue affects MarketKing: from n/a through <= 2.0.92.