CVE-2026-66625

WC Vendors Marketplace versions up to 2.7.2.1 are vulnerable to an SQL injection flaw that allows attackers to manipulate database queries, potentially leading to unauthorized access to sensitive data. Organizations using this plugin should prioritize patching or upgrading to mitigate the risk of data breaches and maintain the integrity of their systems.