Medium · 5.3 CVE-2026-85311 EUVD-2026-70970GHSA-4j6r-jmmc-298x

WordPress MarketKing plugin <= 2.1.60 - Broken Access Control vulnerability

Published Sep 4, 2026 · Updated Sep 7, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Kings Plugins MarketKing allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects MarketKing: from n/a through 2.1.60.

Vendor	Product	Affected	Fixed
Kings Plugins	MarketKing	≤ 2.1.60	—