blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2026-57685

MEDIUM 4.3 CVSS 3.1
Published
July 2, 2026
Last modified
October 25, 2026
NVD status
Deferred
Reported by
audit@patchstack.com
Weakness
CWE-862
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Description

Subscriber Broken Access Control in Martfury - WooCommerce Marketplace WordPress Theme <= 3.2.8 versions.

Affected products and versions

  • drfuri Martfury - WooCommerce Marketplace WordPress Theme — Up to and including 3.2.8

References

  • patchstack.com https://patchstack.com/database/wordpress/theme/martfury/vulnerability/wordpress-martfury-woocommerce-marketplace-wordpress-theme-theme-3-2-8-broken-access-control-vulnerability?_s_id=cve
  • nvd.nist.gov Official NVD record