Approved changes feed: RSS · Atom

cpe:2.3:a:wcvendors:wc_vendors_marketplace:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWcvendors (edda5f94-b477-5ce2-916f-3a7bda7d8e52)
ProductWc Vendors Marketplace (4422a66d-5de0-51ef-8c37-61611cf12067)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wcvendors/wcvendors purl2cpe 2026-06-01 10:17:52.371764

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49263 vulnerable 2026-06-08 07:29:12.828555 WordPress WC Vendors Marketplace plugin <= 2.5.6 - SQL Injection Vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WCVendors WC Vendors Marketplace wc-vendors allows Blind SQL Injection.This issue affects WC Vendors Marketplace: from n/a through <= 2.5.6.
Published: 2025-06-06T12:53:38.578Z
Updated: 2026-04-28T16:12:59.801Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.