These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A critical vulnerability was found in WCFM Marketplace plugin versions <= 3.8.1. This vulnerability allows unauthenticated SQL injection attacks with a CVSS score of 9.3.
A SQL Injection vulnerability exists in WCFM Marketplace, a multivendor marketplace plugin for WordPress, due to improper neutralization of special elements used in an SQL command. This issue affects WCFM Marketplace versions from n/a through 3.7.1. The vulnerability allows attackers to inject malicious SQL code, potentially leading to data breaches or other security issues. Defenders should assess exposu [truncated]