Multivendorx vulnerabilities

Products

• Multivendorx 23
• Wc Marketplace 4
• Product Catalog Enquiry For Woocommerce By Multivendorx 3
• Product Catalog Mode For Woocommerce 2
• Woocommerce Product Stock Alert 2

Newest

• multivendorx WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerability CVE-2026-114711 6.5 MediumOctober 30, 2026
• multivendorx MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint CVE-2026-108695 7.1 HighOctober 11, 2026
• multivendorx MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST Endpoint CVE-2026-74926 7.1 HighSeptember 16, 2026
• multivendorx MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator CVE-2026-74925 7.2 HighSeptember 11, 2026
• multivendorx product catalog enquiry for woocommerce by multivendorx WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.5 - Privilege Escalation vulnerability CVE-2026-81792 6.5 MediumSeptember 8, 2026
• multivendorx MultiVendorX 5.0.13 - 5.0.14 - Unauthenticated Vendor PII and Payout Data Disclosure via stores REST Endpoint CVE-2026-74927 5.3 MediumSeptember 2, 2026
• multivendorx WordPress MultiVendorX plugin <= 5.0.20 - Broken Access Control vulnerability CVE-2026-66651 6.5 MediumAugust 18, 2026
• multivendorx WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability CVE-2026-66441 7.5 HighAugust 13, 2026
• multivendorx MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint CVE-2026-16746 2.7 LowAugust 5, 2026
• multivendorx MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorization CVE-2026-16605 7.2 HighAugust 5, 2026
• multivendorx woocommerce product stock alert WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability CVE-2026-61945 6.5 MediumJuly 23, 2026
• multivendorx WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability CVE-2025-49916 8.6 HighOctober 22, 2025
• multivendorx WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability CVE-2025-48261 7.5 HighJune 9, 2025
• multivendorx WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48263 6.5 MediumMay 19, 2025
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion CVE-2025-4101 4.3 MediumMay 17, 2025
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion CVE-2025-2789 5.3 MediumApril 5, 2025
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion CVE-2025-0493 9.8 CriticalJanuary 31, 2025
• multivendorx WordPress MultiVendorX plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability CVE-2025-24706 6.5 MediumJanuary 24, 2025
• multivendorx woocommerce product stock alert WordPress WooCommerce Product Stock Alert plugin <= 2.0.1 - Broken Access Control vulnerability CVE-2023-37971 6.5 MediumDecember 13, 2024
• multivendorx product catalog enquiry for woocommerce by multivendorx WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 5.0.2 - Broken Access Control vulnerability CVE-2023-50899 5.4 MediumDecember 9, 2024
• multivendorx, multivendorx wc marketplace +1 more WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability CVE-2023-51355 8.2 HighDecember 9, 2024
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates CVE-2024-9943 6.3 MediumOctober 24, 2024
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending CVE-2024-9531 4.3 MediumOctober 24, 2024
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover CVE-2024-8289 Public exploit 9.8 CriticalSeptember 4, 2024
• multivendorx wc marketplace WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-43213 7.1 HighAugust 12, 2024
• multivendorx wc marketplace WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability CVE-2024-24703 8.6 HighJune 11, 2024
• multivendorx, multivendorx wc marketplace +1 more WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerability CVE-2024-31304 7.1 HighJune 9, 2024
• multivendorx product catalog enquiry for woocommerce by multivendorx, product catalog mode for woocommerce +1 more WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability CVE-2024-25929 6.5 MediumJune 9, 2024
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter CVE-2024-5259 6.4 MediumJune 6, 2024
• multivendorx wc marketplace WordPress MultiVendorX Marketplace plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-30433 6.5 MediumMarch 29, 2024
• multivendorx product catalog mode for woocommerce Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update CVE-2023-5348 6.1 MediumDecember 18, 2023
• multivendorx product stock manager & notifier for woocommerce, product stock manager \& notifier for woocommerce +1 more WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure CVE-2023-37972 5.3 MediumNovember 30, 2023
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass CVE-2020-36741 4.3 MediumJuly 1, 2023