Medium · 5.4 CVE-2023-50899 EUVD-2023-55632GHSA-35qp-cqfp-xw3g

WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 5.0.2 - Broken Access Control vulnerability

Published Dec 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: MultiVendorX Product: Product Catalog Enquiry for WooCommerce by MultiVendorX Category: Web / CMS

Description

Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.2.

Affected products

Vendor	Product	Affected	Fixed
MultiVendorX	Product Catalog Enquiry for WooCommerce by MultiVendorX	≤ 5.0.2	—

References

https://patchstack.com/database/wordpress/plugin/woocommerce-catalog-enquiry/vulnerability/wordpress-product-catalog-enquiry-for-woocommerce-by-multivendorx-plugin-5-0-2-broken-access-control-vulnerability?_s_id=cve vdb-entry