wclovers WCFM – Multivendor Marketplace REST API for WooCommerce

• CVE-2025-1311 Medium 6.5 WooCommerce Multivendor Marketplace – REST API <= 1.6.2 - Authenticated (Subscriber+) SQL Injection 0.4%
• CVE-2023-2275 Medium 4.3 WooCommerce Multivendor Marketplace – REST API <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order/Order Note Disclosure, Order Note Addition via REST API 0.5%