Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

WCFM Marketplace 1.0.2 Unauthenticated RCE (CVSS 9.8) & PoC

www.wordfence.com 2026-09-18 查看中文 →

Security Advisory Critical WCFM

Affected:

WCFM Marketplace <= 3.8.2
WCFM Marketplace 1.0.2

Referenced CVEs: CVE-2026-18442 · 7.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Popup Maker 2.1.4 Deserialization RCE: Analysis & PoC 2026-09-19 GoPay for WooCommerce <= 1.0.36 Authenticated SQL Injection (CVE-2026-75999) 2026-09-19 Search Atlas SEO Plugin Privilege Escalation via Unauthenticated delete_post Function 2026-09-19 Real 3D Flipbook CVE-2026-15998 Authenticated Stored XSS via lightboxtext Shortcode 2026-09-19 Unauthenticated Open Redirect in Hide My WP Ghost Plugin (CVE-2026-7527) 2026-09-19

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro