CVE-2026-15351 | wcvendors WC Vendors Plugin up to 2.7.0 on WordPress sanitize_text_field Status sql injection

August 16, 2026 Yanac

A vulnerability was found in wcvendors WC Vendors Plugin up to 2.7.0 on WordPress. It has been rated as problematic. This vulnerability affects the function sanitize_text_field. The manipulation of the argument Status leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-15351. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More