HIGH
Rymera Web Co
CVE published 2026-06-25
CVE-2026-54838
A SQL injection vulnerability exists in the WC Vendors Marketplace plugin versions up to 2.6.8. This issue allows a subscriber to inject malicious SQL code. The vulnerability has a CVSS score of 8.5 and is classified as HIGH severity.