Marketking
Monthly
Missing Authorization in MarketKing WordPress plugin (≤2.1.60) allows unauthenticated remote attackers to perform integrity-affecting actions by exploiting incorrectly configured access control security levels. The CVSS vector (PR:N/UI:N/AV:N) confirms no authentication or user interaction is required. No public exploit or CISA KEV listing identified at time of analysis; impact is limited to partial integrity (C:N/A:N) per CVSS.
Broken access control in MarketKing (WooCommerce multivendor marketplace plugin) version 2.1.40 and earlier allows unauthenticated remote attackers to perform unauthorized marketplace actions without valid credentials. The flaw stems from missing authorization checks (CWE-862), enabling integrity-impacting operations against affected WordPress/WooCommerce installations. No public exploit code or active exploitation has been identified at time of analysis, and the impact is constrained to integrity (I:L), with no confidentiality or availability consequences.
Missing Authorization in MarketKing WordPress plugin (≤2.1.60) allows unauthenticated remote attackers to perform integrity-affecting actions by exploiting incorrectly configured access control security levels. The CVSS vector (PR:N/UI:N/AV:N) confirms no authentication or user interaction is required. No public exploit or CISA KEV listing identified at time of analysis; impact is limited to partial integrity (C:N/A:N) per CVSS.
Broken access control in MarketKing (WooCommerce multivendor marketplace plugin) version 2.1.40 and earlier allows unauthenticated remote attackers to perform unauthorized marketplace actions without valid credentials. The flaw stems from missing authorization checks (CWE-862), enabling integrity-impacting operations against affected WordPress/WooCommerce installations. No public exploit code or active exploitation has been identified at time of analysis, and the impact is constrained to integrity (I:L), with no confidentiality or availability consequences.