CVE-2026-27399 WebWizards CVE debrief

Who should care

Defenders responsible for WordPress environments using the MarketKing plugin should assess exposure and prioritize remediation for this vulnerability.

Why it matters

CVE-2026-27399 is a MEDIUM-severity vulnerability in MarketKing plugin versions <= 2.1.40, allowing unauthenticated broken access control. Defenders responsible for WordPress environments using the MarketKing plugin should assess exposure and prioritize remediation for this vulnerability.

• Verify if the MarketKing plugin version is <= 2.1.40 in your WordPress environment.
• Assess exposure and prioritize remediation for this vulnerability.
• Monitor for any suspicious activity related to the MarketKing plugin.

Technical summary

CVE-2026-27399 is a MEDIUM-severity vulnerability in MarketKing plugin versions <= 2.1.40, allowing unauthenticated broken access control. The vulnerability has a CVSS score of 5.3 and a CVSS vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Defensive priority

Defenders should prioritize verifying exposure and remediation for this vulnerability, especially in WordPress environments using the affected plugin versions.

Recommended defensive actions

• Verify if the MarketKing plugin version is <= 2.1.40 in your WordPress environment.
• Assess exposure and prioritize remediation for this vulnerability.
• Monitor for any suspicious activity related to the MarketKing plugin.

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine the actual impact and affected scope.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.