MultiVendorX vulnerabilities and threats

9 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2026-114711MultiVendorX (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-10-30CVE Database V5CVE-2026-114711 Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2026-10-30
Medium	6.5	EPSS 0.3%	CVE-2026-81792Product Catalog Enquiry for WooCommerce by MultiVendorX (WordPress plugin) · Incorrect Privilege Assignment Medium6.5EPSS 0.3%2026-09-08CVE Database V5CVE-2026-81792 CVE-2026-81792 is an Incorrect Privilege Assignment vulnerability in the MultiVendorX Product Catalog Enquiry plugin for WooCommerce. It allows privilege escalation due to improper access control. The issue affects all versions from initial release up to 6.1.5 inclusive. The vulnerability has a medium severity rating with a CVSS score of 6.5. No official patch or vendor advisory is provided in the input data. EPSS 0.3%Vulnerability CWE-266 #ghsa-r7vv-8m42-6955	CVE Database V5	2026-09-08
Medium	6.5	EPSS 0.4%	CVE-2026-61945WooCommerce Product Stock Alert (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium6.5EPSS 0.4%2026-07-23CVE Database V5CVE-2026-61945 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6. EPSS 0.4%Vulnerability MultiVendorX CWE-497	CVE Database V5	2026-07-23
High	7.5	EPSS 0.4%	CVE-2025-48261MultiVendorX (WordPress plugin) · Insertion of Sensitive Information Into Sent Data High7.5EPSS 0.4%2025-06-09CVE Database V5CVE-2025-48261 Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX allows Retrieve Embedded Sensitive Data. This issue affects MultiVendorX: from n/a through 4.2.22. EPSS 0.4%Vulnerability CWE-201	CVE Database V5	2025-06-09
High	7.1	EPSS 0.3%	CVE-2024-43213WC Marketplace (WordPress plugin) · XSS or 'Cross-site Scripting' High7.1EPSS 0.3%2024-08-12CVE Database V5CVE-2024-43213 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MultiVendorX WC Marketplace allows Reflected XSS.This issue affects WC Marketplace: from n/a through 4.1.17. EPSS 0.3%Vulnerability MultiVendorX CWE-79	CVE Database V5	2024-08-12
High	8.6	EPSS 0.4%	CVE-2024-24703WC Marketplace (WordPress plugin) · Missing Authorization High8.6EPSS 0.4%2024-06-11CVE Database V5CVE-2024-24703 Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25. EPSS 0.4%Vulnerability MultiVendorX CWE-862	CVE Database V5	2024-06-11
High	7.1	EPSS 0.4%	CVE-2024-31304WC Marketplace (WordPress plugin) · Missing Authorization High7.1EPSS 0.4%2024-06-09CVE Database V5CVE-2024-31304 Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3. EPSS 0.4%Vulnerability MultiVendorX CWE-862	CVE Database V5	2024-06-09
Medium	6.5	EPSS 0.3%	CVE-2024-25929Product Catalog Enquiry for WooCommerce by MultiVendorX (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2024-06-09CVE Database V5CVE-2024-25929 Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.5. EPSS 0.3%Vulnerability CWE-862	CVE Database V5	2024-06-09
Medium	6.5	EPSS 0.4%	CVE-2024-30433WC Marketplace (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.4%2024-03-29CVE Database V5CVE-2024-30433 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MultiVendorX WC Marketplace allows Stored XSS.This issue affects WC Marketplace: from n/a through 4.1.3. EPSS 0.4%Vulnerability MultiVendorX CWE-79	CVE Database V5	2024-03-29

Page 1 of 1