Skip to content
OpenAdvisories

Vendor

MultiVendorX

19 known vulnerabilities.

Products

MultiVendorX 9 WC Marketplace 4 Product Catalog Enquiry for WooCommerce by MultiVendorX 3 WooCommerce Product Stock Alert 2 Product Stock Manager & Notifier for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.1
    CVE-2026-108695

    MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint

    MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint. Attackers with the store_owner role can send POST requests to /wp-js…

    MultiVendorX MultiVendorX Web / CMS
  • High 7.5
    CVE-2026-66441

    WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions.

    MultiVendorX MultiVendorX
  • High 8.6
    CVE-2025-49916

    WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability

    Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through <= 4.2.23.

    MultiVendorX MultiVendorX
  • High 7.5
    CVE-2025-48261

    WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Retrieve Embedded Sensitive Data.This issue affects MultiVendorX: from n/a through <= 4.2.22.

    MultiVendorX MultiVendorX
  • High 8.2
    CVE-2023-51355

    WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability

    Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through <= 4.0.23.

    MultiVendorX MultiVendorX
  • High 7.1
    CVE-2024-43213

    WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MultiVendorX WC Marketplace allows Reflected XSS.This issue affects WC Marketplace: from n/a through 4.1.17.

    MultiVendorX WC Marketplace
  • High 8.6
    CVE-2024-24703

    WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability

    Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25.

    MultiVendorX WC Marketplace
  • High 7.1
    CVE-2024-31304

    WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3.

    MultiVendorX WC Marketplace