CVE-2021-24849 | BDVDB-2026-166244 Detail

WCFM Marketplace – Best Multivendor Marketplace for WooCommerce

Description#

The wcfm_ajax_controller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticated and authenticated user, does not properly sanitise multiple parameters before using them in SQL statements, leading to SQL injections

Impact#

No impact statement in the source data.

Weaknesses#

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

https://wpscan.com/vulnerability/763c08a0-4b2b-4487-b91c-be6cc2b9322e

Exploit#

No public exploit known

History#

Version 12021-12-21Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.