Ghostwire

CVE-2026-57806: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury -...

HIGH CVSS 7.1 Exploit Available

Published: October 10, 2026 | Last Modified: October 10, 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9.

Ghostwire Analysis — What This Means Practically

High CVSS score indicates significant risk — exploitation could lead to substantial data exposure or system compromise.
Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References

patchstack.com/database/wordpress/theme/martfury/vulnerability/wordpress-martfur
www.tenable.com/cve/CVE-2026-57806
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-57806