Martfury - WooCommerce Marketplace WordPress <= 3.2.8 - Missing Authorization

2026-06-29 00:00

Ananda Dhakal

Strategic Overview

Status

Unpatched

Affected ThemeMartfury - Marketplace Mobile App Figma Template

Affected Version<= 3.2.8

CVSS4.3Medium

CVECVE-2026-57685

View all Martfury - Marketplace Mobile App Figma Template vulnerabilities

Vulnerability Overview

The Martfury - WooCommerce Marketplace WordPress theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 3.2.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.

Technical Analysis

REMEDIATION: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement. --- IDENTIFIER: CWE-862 (Missing Authorization) The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

External References

https://www.cve.org/CVERecord?id=CVE-2026-57685 https://www.wordfence.com/threat-intel/vulnerabilities/id/7fe3849a-05df-4530-91af-be0402169544