Description
Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MultiVendorX | MultiVendorX | ≤ 5.0.10 | — |
High · 7.5
CVE-2026-66441
EUVD-2026-57867GHSA-pmm9-qmcr-8vpp
WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability
Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by Patchstack