CVE-2026-120848 | WC Lovers WCFM Marketplace Plugin up to 3.8.3 on WordPress cross site scripting

A vulnerability, which was classified as problematic, has been found in WC Lovers WCFM Marketplace Plugin up to 3.8.3 on WordPress. This affects an unknown part. Performing a manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-120848. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More