https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T23:08:28.244700+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24849 CVE-2021-24849 — WCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL Injection 2026-10-09T23:08:28.260465+00:00

Affected: Unknown WCFM Marketplace – Best Multivendor Marketplace for WooCommerce

The wcfm_ajax_controller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticated and authenticated user, does not properly sanitise multiple parameters before using them in SQL statements, leading to SQL injections