Live › vulnerability › CVE-2026-111847
Go to dashboardMarketKing, a WordPress multivendor marketplace plugin for WooCommerce, lacks an authorization check on some functionality, so access controls are not enforced as intended. The sources do not say which actions an attacker can perform or what data they can reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the MarketKing multivendor marketplace plugin for WooCommerce at version or earlier are in scope. Sites that do not have this plugin installed are not affected.
2.1.72No product ranges from the sources yet.
wp plugin get marketking-multivendor-marketplace-for-woocommerce --field=version2.1.72 and earlier2.1.72 once the vendor publishes one; the sources do not name a fixed versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72.
This page as .md · .json · in your agent: get_signal("CVE-2026-111847")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.