Wcmp vulnerabilities

Products

• Multivendorx – Woocommerce Multivendor Marketplace Solutions 8
• Multivendorx – Woocommerce Multivendor Marketplace Ai Powered Solutions 2

Newest

• wcmp multivendorx – woocommerce multivendor marketplace ai powered solutions MultiVendorX <= 5.0.18 - Authenticated (Store Manager+) SQL Injection via 'order_by' Parameter CVE-2026-12951 6.5 MediumOctober 2, 2026
• wcmp multivendorx – woocommerce multivendor marketplace ai powered solutions MultiVendorX <= 5.0.9 - Authenticated (Store Owner+) SQL Injection via 'order_by' Parameter CVE-2026-12941 6.5 MediumJuly 16, 2026
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion CVE-2025-4101 4.3 MediumMay 17, 2025
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion CVE-2025-2789 5.3 MediumApril 5, 2025
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion CVE-2025-0493 9.8 CriticalJanuary 31, 2025
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates CVE-2024-9943 6.3 MediumOctober 24, 2024
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending CVE-2024-9531 4.3 MediumOctober 24, 2024
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover CVE-2024-8289 Public exploit 9.8 CriticalSeptember 4, 2024
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter CVE-2024-5259 6.4 MediumJune 6, 2024
• multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 more MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass CVE-2020-36741 4.3 MediumJuly 1, 2023