Unauthorized Access Vulnerability in MarketKing WooCommerce Marketplace Solution

CVE-2024-12413

Summary

The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress has a significant vulnerability that allows unauthorized access due to inadequate capability checks in multiple functions. This flaw affects all versions up to and including 2.0.00, making it possible for attackers without authentication to perform critical administrative actions. Attackers can delete users, modify settings, and approve user registrations, jeopardizing the security and integrity of the marketplace. It is crucial for users of this plugin to take immediate action to secure their installations to prevent unauthorized manipulations.

References