Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 20:30:18 +0000 CVE-2021-24849 — WCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL Injection https://cve.radiocsirt.org/vuln/cve-2021-24849 <p><strong>Affected:</strong> Unknown WCFM Marketplace – Best Multivendor Marketplace for WooCommerce</p> <p>The wcfm_ajax_controller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticated and authenticated user, does not properly sanitise multiple parameters before using them in SQL statements, leading to SQL injections</p> <p><strong>Affected:</strong> Unknown WCFM Marketplace – Best Multivendor Marketplace for WooCommerce</p> <p>The wcfm_ajax_controller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticated and authenticated user, does not properly sanitise multiple parameters before using them in SQL statements, leading to SQL injections</p> https://cve.radiocsirt.org/vuln/cve-2021-24849