CVE-2026-54838: Rymera Web Co Wc Vendors Marketplace

High severity, CVSS 8.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.

Affected products

• Rymera Web Co Wc Vendors Marketplace: up to and including 2.6.8

Published 2026-06-25. Last modified 2026-06-25.