CVE-2026-39794

The WooCommerce Multivendor Marketplace REST API versions up to 1.6.3 are vulnerable to unauthenticated broken access control, allowing attackers to exploit the API without authentication. This could lead to unauthorized access to sensitive data or functionality, potentially compromising the integrity of the marketplace. E-commerce platforms utilizing this plugin should prioritize patching this vulnerability to protect against potential exploitation.