PatchSiren

SoftMarket CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review SoftMarket CVE published 2026-08-03

CVE-2026-14557

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauthenticated attackers to obtain a valid session as any verified user by supplying only that user's ID. This vulnerability affects deployments using the plugin's email verification functionality. Defenders should verify plugin vers [truncated]