CVE-2026-57685
Deferred Deferred - Pending Action

Subscriber Broken Access Control in Martfury WooCommerce Theme

Publication date: 2026-07-02

Last updated on: 2026-07-02

Assigner: Patchstack

Description
Subscriber Broken Access Control in Martfury - WooCommerce Marketplace WordPress Theme <= 3.2.8 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-02
Last Modified
2026-07-02
Generated
2026-07-02
AI Q&A
2026-07-02
EPSS Evaluated
N/A
NVD
CVE-2026-57685
EUVD
EUVD-2026-41294

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The CVE-2026-57685 vulnerability affects the WordPress theme "Martfury - WooCommerce Marketplace WordPress Theme" versions 3.2.8 and below.

It is classified as a Broken Access Control issue, meaning there is a missing authorization, authentication, or nonce token check in a function.

This flaw potentially allows unprivileged users to perform actions that require higher privileges.

Impact Analysis

This vulnerability can allow users without proper permissions to perform actions they should not be able to, potentially compromising the integrity of the WooCommerce Marketplace functionality on your WordPress site.

However, the impact is considered low severity with a CVSS score of 4.3, and it is unlikely to be exploited.

Since there is no official patch available as of the report date, it is recommended to update the theme or seek assistance from a hosting provider or web developer to mitigate risks.

Mitigation Strategies

The vulnerability affects Martfury - WooCommerce Marketplace WordPress Theme versions 3.2.8 and below and is a Broken Access Control issue.

As of the report date, there is no official patch available for this vulnerability.

Immediate recommended actions include updating the theme if an update becomes available or seeking assistance from your hosting provider or a web developer to mitigate the risk.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57685. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart