MultiVendorX vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20248
3. 20254
4. 20266

Newest CVEs

• CVE-2026-114711

  WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerability

  MultiVendorX · MultiVendorX

  Medium6.5
• CVE-2026-108695

  MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint

  multivendorx · MultiVendorX

  High7.1
• CVE-2026-81792

  WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.5 - Privilege Escalation vulnerability

  MultiVendorX · Product Catalog Enquiry for WooCommerce by MultiVendorX

  Medium6.5
• CVE-2026-66651

  WordPress MultiVendorX plugin <= 5.0.20 - Broken Access Control vulnerability

  MultiVendorX · MultiVendorX

  Medium6.5
• CVE-2026-66441

  WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability

  MultiVendorX · MultiVendorX

  High7.5
• CVE-2026-61945

  WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability

  MultiVendorX · WooCommerce Product Stock Alert

  Medium6.5
• CVE-2025-49916

  WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability

  MultiVendorX · MultiVendorX

  High8.6
• CVE-2025-48261

  WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability

  MultiVendorX · MultiVendorX

  High7.5
• CVE-2025-48263

  WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability

  MultiVendorX · MultiVendorX

  Medium6.5
• CVE-2025-24706

  WordPress MultiVendorX plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

  MultiVendorX · MultiVendorX

  Medium6.5