Known Vulnerabilities for WC Vendors by Unknown
Listed below are 10 of the newest known vulnerabilities associated with "WC Vendors" by "Unknown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-81428 json | The WC Vendors WordPress plugin before 2.7.2.1 does not verify ownership or the object type of user-supplied IDs when saving... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-81427 json | The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status ... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-81426 json | The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status ... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-54838 json | Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions. | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-19383 json | A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_exec of... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-18749 json | The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coordinat... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-16746 json | The MultiVendorX WordPress plugin before 5.0.11 does not verify that the requested store belongs to the current user in one ... | Not Provided | 2026-08-05 | 2026-08-06 |
| CVE-2026-16564 json | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order owner... | Not Provided | 2026-08-03 | 2026-08-03 |
| CVE-2026-16058 json | The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-ven... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-15351 json | The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to ge... | Not Provided | 2026-08-16 | 2026-08-17 |