wcmp vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20244
3. 20253
4. 20262

Newest CVEs

• CVE-2026-12951

  MultiVendorX <= 5.0.18 - Authenticated (Store Manager+) SQL Injection via 'order_by' Parameter

  wcmp · MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions

  Medium6.5
• CVE-2026-12941

  MultiVendorX <= 5.0.9 - Authenticated (Store Owner+) SQL Injection via 'order_by' Parameter

  wcmp · MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions

  Medium6.5
• CVE-2025-4101

  MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion

  wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

  Medium4.3
• CVE-2025-2789

  MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion

  wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

  Medium5.3
• CVE-2025-0493

  MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion

  wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

  Critical9.8
• CVE-2024-9943

  MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates

  wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

  Medium6.3
• CVE-2024-9531

  MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending

  wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

  Medium4.3
• CVE-2024-8289

  MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover

  wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

  Critical9.8
• CVE-2024-5259

  MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter

  wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

  Medium6.4
• CVE-2020-36741

  MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass

  wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

  Medium4.3