CVE-2026-81286

WCFM Marketplace versions up to 3.8.1 are vulnerable to an unauthenticated SQL injection, allowing attackers to execute arbitrary SQL queries on the database. This critical vulnerability could lead to data exposure, manipulation, or complete system compromise. Organizations using affected versions should prioritize immediate remediation to safeguard their data integrity and security.