Threats tagged 'ghsa-g9c6-724g-v3p4'

The MultiVendorX plugin for WordPress versions before 5.0.22 has a broken access control vulnerability in its REST API route /wp-json/multivendorx/v1/stores. Authenticated vendors with the store_owner role can exploit missing ownership checks to access administrative flag handlers and retrieve sensitive information from other stores, such as contact emails, pending withdrawal amounts, onboarding data, deactivation reasons, and visitor analytics. This leads to a cross-tenant confidentiality breach.