HIGH
drfuri
CVE published 2026-10-10
CVE-2026-57806
A Cross-site Scripting (XSS) vulnerability exists in Martfury - WooCommerce Marketplace WordPress Theme versions up to 3.3.9, allowing Reflected XSS attacks. This issue arises from improper neutralization of input during web page generation. Defenders and administrators of WordPress sites using Martfury - WooCommerce Marketplace WordPress Theme should assess exposure and prioritize updating to a patched v [truncated]