Skip to content
Sign in
4.3 Medium

CVE-2026-14196 The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before…

Description

The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before allowing it to be unapproved or deleted, allowing any vendor to modify or permanently delete reviews belonging to other vendors' stores.

Affected products and versions

Product Affected versions Fixed in
WCFM Marketplace 3.8 earliest → < 3.8.1 3.8.1

Other CVEs of WCFM Marketplace

The 2 CVEs of WCFM Marketplace →
CVE-2026-77701 The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns… 5.3 Medium
Track this CVE