CVE-2026-81792: Incorrect Privilege Assignment in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX

This vulnerability (CVE-2026-81792) in MultiVendorX Product Catalog Enquiry for WooCommerce arises from incorrect privilege assignment, enabling privilege escalation. The affected versions are from the initial release through 6.1.5. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. No known exploits in the wild have been reported.

Successful exploitation could allow an attacker to escalate privileges within the affected WooCommerce plugin environment, potentially leading to integrity and availability impacts. Confidentiality is not affected according to the CVSS vector. This could disrupt normal operations or allow unauthorized modification of data related to the product catalog enquiry functionality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restricting access to the affected plugin functionality and limiting user permissions may reduce risk.