cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-13519,https://securityvulnerability.io/vulnerability/CVE-2024-13519,Stored Cross-Site Scripting Vulnerability in MarketKing by WordPress,"The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress presents a stored cross-site scripting vulnerability due to inadequate input sanitization and output escaping. This issue allows authenticated attackers with Shop Manager permissions and above to inject arbitrary scripts into plugin settings. The injected scripts can execute on any page accessed by users, posing a significant risk, especially in multi-site installations where unfiltered_html is disabled.",Wordpress,Marketking — Ultimate WooCommerce Multivendor Marketplace Solution,4.4,MEDIUM,0.00044999999227002263,false,,false,false,false,false,false,false,2025-01-18T07:05:08.206Z,0
CVE-2024-12413,https://securityvulnerability.io/vulnerability/CVE-2024-12413,Unauthorized Access Vulnerability in MarketKing WooCommerce Marketplace Solution,"The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress has a significant vulnerability that allows unauthorized access due to inadequate capability checks in multiple functions. This flaw affects all versions up to and including 2.0.00, making it possible for attackers without authentication to perform critical administrative actions. Attackers can delete users, modify settings, and approve user registrations, jeopardizing the security and integrity of the marketplace. It is crucial for users of this plugin to take immediate action to secure their installations to prevent unauthorized manipulations.",Wordpress,Marketking — Ultimate WooCommerce Multivendor Marketplace Solution,5.3,MEDIUM,0.0004600000102072954,false,,false,false,false,,false,false,2024-12-25T03:21:31.601Z,0