Known vulnerabilities in Unknown WC Vendors
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-81426 | The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment… | 4.3 Medium | Sep 2, 2026 |
| CVE-2026-81427 | The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment… | 4.3 Medium | Sep 2, 2026 |
| CVE-2026-81428 | The WC Vendors WordPress plugin before 2.7.2.1 does not verify ownership or the object type of user-supplied IDs when… | 6.5 Medium | Sep 2, 2026 |