CVE-2024-44009Disclosure(wclovers / wcfm_marketplace)

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Reflected XSS.This issue affects WCFM Marketplace: from n/a through <= 3.6.11.

wclovers CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/wc-multivendor-marketplace/vulnerability/wordpress-wcfm-marketplace-3-6-10-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

wcfm_marketplace

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 1 mentions (2026-04-16); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

wclovers

Products

wcfm_marketplace

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets1 URL

By indicator

https://securityarsenal.com/blog/cve-2024-44009-and-cve-2024-44010-n8n-workflow-automation-critical-vulnerabilities-detection-and-remediation

Classification over time

Date	Total	Labels

2026-04-16	1	Disclosure1
2026-04-17	1	General1

Full discourse2 posts

Security Arsenal, LLC@SecurityAr58409174d
General
🔒 #CyberSecurity CVE-2024-44009 & CVE-2024-44010: n8n Workflow Automation Critical Vulnerabiliti… "Security teams must immediately address two critical vulnerabilities…" 🔗 https://securityarsenal.com/blog/cve-2024-44009-and-cve-2024-44010-n8n-workflow-automation-critical-vulnerabilities-detection-and-remediation #CyberSecurity #ThreatIntel #alerttriage #alertfatigue #socautomation
Post summary
The tweet alerts on two critical CVEs affecting n8n Workflow Automation and directs readers to a blog for remediation guidance, without providing PoC, exploit, or technical details.
0000050
10 followersView on X
Security Arsenal, LLC@SecurityAr58409175d
Disclosure
🔒 #CyberSecurity CVE-2024-44009 & CVE-2024-44010: n8n Workflow Automation Critical Vulnerabiliti… "Critical n8n flaws (CVE-2024-44009, CVE-2024-44010) enable RCE and…" 🔗 https://securityarsenal.com/blog/cve-2024-44009-and-cve-2024-44010-n8n-workflow-automation-critical-vulnerabilities-detection-and-remediation #CyberSecurity #ThreatIntel #alerttriage #alertfatigue #socautomation
Post summary
The tweet announces that CVE-2024-44009 and CVE-2024-44010 are critical n8n workflow automation flaws that enable remote code execution, without providing PoC, exploit code, or patch details.
0000044
10 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	wclovers	wcfm_marketplace	-	wordpress	-

Explore more

Back to dashboard wclovers CVEs wcfm_marketplace vulnerabilities