Marketking Multivendor Marketplace For Woocommerce Vulnerabilities

The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.1.40. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.1.40

Fixed in:

2.1.50

Disclosed:

Jul 21, 2026

CVE-2026-27399 on NVD →

The MarketKing plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.92 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that...

CVSS:

6.4

Affected:

up to 2.0.92

Fixed in:

2.1.00

Disclosed:

Sep 22, 2025

CVE-2025-58702 on NVD →

The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's settings in all versions up to, and including, 1.9.80 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVSS:

4.4

Affected:

up to 1.9.80

Fixed in:

2.0.0

Disclosed:

Jan 17, 2025

CVE-2024-13519 on NVD →

The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions like 'marketking_delete_team_member', 'marketkingrejectuser', 'marketking_save_profile_settings', and many more in all versions up to, an...

CVSS:

5.3

Affected:

up to 2.0.00

Fixed in:

2.0.25

Disclosed:

Dec 24, 2024

CVE-2024-12413 on NVD →