4.3
Moyenne
CVE-2026-14196 The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before…
Description
The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before allowing it to be unapproved or deleted, allowing any vendor to modify or permanently delete reviews belonging to other vendors' stores.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WCFM Marketplace 3.8 | premières → < 3.8.1 | 3.8.1 |