PatchSiren

Rymera Web Co CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Rymera Web Co CVE published 2026-06-25

CVE-2026-54838

A SQL injection vulnerability exists in the WC Vendors Marketplace plugin versions up to 2.6.8. This issue allows a subscriber to inject malicious SQL code. The vulnerability has a CVSS score of 8.5 and is classified as HIGH severity.