Threats tagged 'ghsa-wvj4-2674-f7w2'

A missing authorization vulnerability exists in WC Lovers WCFM Marketplace (wc-multivendor-marketplace) up to version 3.8.3. This flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a CVSS score of 4.3, indicating medium severity, with impact limited to integrity without affecting confidentiality or availability. No patch or official fix information is provided at this time.