Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-48263 EUVD-2025-28181GHSA-h53g-gc6r-59pf

WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability

Published May 19, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Stored XSS.This issue affects MultiVendorX: from n/a through <= 4.2.22.

Affected products

VendorProductAffectedFixed
MultiVendorX MultiVendorX ≤ 4.2.22 —

References