CVE-2026-111847: WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerability

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation does not require user interaction and can be performed over the network.

Q: What is the potential impact of successful exploitation?

Successful exploitation may result in limited unauthorized disclosure or modification of information. The available data does not indicate an availability impact.

Q: Which MarketKing versions are affected?

MarketKing versions through 2.1.72 are affected. No fixed version is identified in the provided data.

Published Oct 22, 2026

Updated

Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72.

Affected Software

1 affected component

Kings Plugins MarketKing<=2.1.72

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress MarketKing plugin to a version that resolves this vulnerability.
Fixed in 2.1.80

Event History

Oct 22, 2026

CVE Published

via MITRE·06:50 AM

Data Sourced

via MITRE·06:50 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation does not require user interaction and can be performed over the network.

What is the potential impact of successful exploitation?