Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.2%	CVE-2026-57806Martfury - WooCommerce Marketplace WordPress Theme · Cross-site Scripting High7.1EPSS 0.2%2026-10-10CVE Database V5CVE-2026-57806 CVE-2026-57806 is a high-severity reflected cross-site scripting (XSS) vulnerability in the drfuri Martfury WooCommerce Marketplace WordPress Theme. It affects versions from 0 up to and including 3.3.9. The vulnerability arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that could impact confidentiality, integrity, and availability. No patch or remediation information is currently provided. EPSS 0.2%Vulnerability drfuri	CVE Database V5	2026-10-10
Medium	4.3	EPSS 0.3%	CVE-2026-57685Martfury - WooCommerce Marketplace WordPress Theme · Missing Authorization Medium4.3EPSS 0.3%2026-07-02CVE Database V5CVE-2026-57685 Subscriber Broken Access Control in Martfury - WooCommerce Marketplace WordPress Theme <= 3.2.8 versions. EPSS 0.3%Vulnerability drfuri #cwe-862	CVE Database V5	2026-07-02

Showing 1–2 of 2 results