VulnSea

WebWizards has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was September 2026 with 5. The median CVSS is 5.4 (medium). None have a confirmed exploitation report. The most common weakness class is CWE-862 (5). Most affected products: MarketKing (4), marketking-multivendor-marketplace-for-woocommerce (1).

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
5.4
Publish → KEV
—
Last 90 days
5 prev 0

Weakness classes

Products

  • MarketKing 4
  • marketking-multivendor-marketplace-for-woocommerce 1
5
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

WebWizards vulnerabilities

CVEs affecting WebWizards, newest first. Open any entry for full detail, references, and exploit status.

5 CVEsRSS

CVE-2026-94080Medium· 5.3
1mo ago

Unauthenticated Broken Access Control in MarketKing <= 2.1.70 versions.

Unauthenticated Broken Access Control in MarketKing <= 2.1.70 versions.

▾ SunlitWebWizards · marketking-multivendor-marketplace-for-woocommerceEPSS 0.29%via NVD
CVE-2026-93344Medium· 6.5
1mo ago

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_get_page_content AJAX action that allows authenticated attackers with subscriber-level access or higher to access arbitrary ve…

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_get_page_content AJAX action that allows authenticated attackers with subscriber-level access or higher to access arbitrary ve…

▾ SunlitWebWizards · MarketKingEPSS 0.43%via NVD
CVE-2026-93341Medium· 4.3
1mo ago

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_send_refund AJAX action that allows authenticated attackers with subscriber-level access or higher to create refund requests a…

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_send_refund AJAX action that allows authenticated attackers with subscriber-level access or higher to create refund requests a…

▾ SunlitWebWizards · MarketKingEPSS 0.33%via NVD
CVE-2026-93342Medium· 5.4
1mo ago

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_duplicate_product AJAX action that allows authenticated attackers with subscriber-level access or higher to duplicate any vend…

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_duplicate_product AJAX action that allows authenticated attackers with subscriber-level access or higher to duplicate any vend…

▾ SunlitWebWizards · MarketKingEPSS 0.32%via NVD
CVE-2026-93343Medium· 6.5
1mo ago

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_admin_vendors_ajax AJAX action that allows authenticated attackers with subscriber-level access or higher to retrieve the comp…

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_admin_vendors_ajax AJAX action that allows authenticated attackers with subscriber-level access or higher to retrieve the comp…

▾ SunlitWebWizards · MarketKingEPSS 0.40%via NVD
WebWizards vulnerabilities (CVEs) · VulnSea