Skip to content
OpenAdvisories

Vendor

wcmp

10 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-8289 Public exploit

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover

    The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to privilege escalation/de-escalation and account takeover due to an insufficient capability check on the update_item_permissions_check and create_…