CVE-2026-54838HIGH NVDCVSS Score 8.5Severity HIGHPublished Jun 25, 2026Vendor unknownDescriptionSubscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/wc-vendors/vulnerability/wordpress-wc-vendors-marketplace-plugin-2-6-8-sql-injection-vulnerability?_s_id=cve