Unauthorized Access Vulnerability in MarketKing WooCommerce Marketplace Solution

CVE-2024-12413

What is CVE-2024-12413?

The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress has a significant vulnerability that allows unauthorized access due to inadequate capability checks in multiple functions. This flaw affects all versions up to and including 2.0.00, making it possible for attackers without authentication to perform critical administrative actions. Attackers can delete users, modify settings, and approve user registrations, jeopardizing the security and integrity of the marketplace. It is crucial for users of this plugin to take immediate action to secure their installations to prevent unauthorized manipulations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References