Doniyor Sotiboldiyev

**Name of the Vulnerable Software and Affected Versions** MarketKing plugin for WordPress versions prior to 2.1.72 **Description** An authorization flaw exists in the `marketking send refund` AJAX action. Authenticated users with subscriber-level access or higher can create fraudulent refund requests for any order by providing an arbitrary order ID. This is achieved by submitting crafted AJAX requests, allowing unauthorized interference with orders not placed by the attacker and causing marketplace disruption. **Recommendations** Update the MarketKing plugin for WordPress to version 2.1.72 or later.

**Name of the Vulnerable Software and Affected Versions** MarketKing plugin for WordPress versions prior to 2.1.72 **Description** An authorization flaw exists in the `marketking duplicate product` AJAX action. Authenticated users with subscriber-level access or higher can duplicate any vendor's product by providing an arbitrary product ID. This allows attackers to bypass ownership verification to copy product listings and private product metadata, assigning the duplicated content to their own vendor account without consent. **Recommendations** Update MarketKing plugin for WordPress to version 2.1.72 or later.

**Name of the Vulnerable Software and Affected Versions** MarketKing plugin for WordPress versions prior to 2.1.72 **Description** An authorization flaw exists in the `marketking admin vendors ajax` AJAX action. Authenticated users with subscriber-level access or higher can send a crafted AJAX request to bypass capability checks in the vendor management action. This allows the retrieval of the complete vendor directory, exposing personally identifiable information such as internal user IDs, usernames, and email addresses of all registered vendors. **Recommendations** Update MarketKing plugin for WordPress to version 2.1.72 or later.

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking get page content AJAX action that allows authenticated attackers with subscriber-level access or higher to access arbitrary vendor administrator panel pages by supplying an arbitrary vendor user ID. Attackers can bypass authorization controls by submitting a target vendor ID in the request to access payout pages, financial reports, and vendor dashboard content belonging to any vendor in the marketplace.