Description
Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rymera Web Co | WC Vendors Marketplace | ≤ 2.6.8 | — |
High · 8.5
CVE-2026-54838
EUVD-2026-39368GHSA-837c-38p7-p5rv
WordPress WC Vendors Marketplace plugin <= 2.6.8 - SQL Injection vulnerability
Published Jun 25, 2026 · Updated Jun 25, 2026 · Assigned by Patchstack