Login Request a demo
WM
Product
WCFM Marketplace
by WC Lovers · last CVE Sep 2, 2026
5
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 1Medium 3Low 0
Severity
All severities5Critical1High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WCFM Marketplace to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-81286
9.3
0%
Sep 2
WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability
Affected: through 3.8.1
CVE-2025-63029
7.6
0%
Apr 15
WordPress WCFM Marketplace plugin <= 3.7.1 - SQL Injection vulnerability
Affected: through 3.7.1
CVE-2026-83562
6.5
0%
Sep 2
WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.8.2
CVE-2024-44009
6.1
0%
Sep 17
WordPress WCFM Marketplace <= 3.6.11 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 3.6.11
CVE-2025-64631
4.9
0%
Dec 16
WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerability
Affected: through 3.7.1
Showing 5