UNKNOWN NVD

CVE-2026-14557

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification f

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauthenticated attackers to obtain a valid session as any verified user by supplying only that user's ID.

References

https://wpscan.com/vulnerability/ed5c7632-a307-43f1-bff0-f70977522e2e/

Published: 2026-08-03 · Source: NVD · Feed updated: 2026-08-04

This unknown severity vulnerability was published on 2026-08-03 via NVD.

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.