Skip to content
OpenAdvisories
High · 7.6 CVE-2023-48327 EUVD-2023-52383GHSA-8ghf-qwf8-v85m

WordPress WC Vendors Marketplace Plugin <= 2.4.7 is vulnerable to SQL Injection

Published Dec 19, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WC Vendors Product: WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Vendors WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors.This issue affects WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors: from n/a through 2.4.7.

Affected products

VendorProductAffectedFixed
WC Vendors WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors ≤ 2.4.7 —

References