CVE-2026-93342

Name of the Vulnerable Software and Affected Versions MarketKing plugin for WordPress versions prior to 2.1.72

Description An authorization flaw exists in the marketking duplicate product AJAX action. Authenticated users with subscriber-level access or higher can duplicate any vendor's product by providing an arbitrary product ID. This allows attackers to bypass ownership verification to copy product listings and private product metadata, assigning the duplicated content to their own vendor account without consent.

Recommendations Update MarketKing plugin for WordPress to version 2.1.72 or later.