MU
Product
MultiVendorX
5
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 1
Watch
Add MultiVendorX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-74925 | 7.2 | Sep 11 | MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator Affected: 5.0.0 before 5.0.16 |
| CVE-2026-16605 | 7.2 | Aug 5 | MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorization Affected: before 5.0.11 |
| CVE-2026-74926 | 7.1 | Sep 16 | MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST Endpoint Affected: 5.0.0 before 5.0.16 |
| CVE-2026-74927 | 5.3 | Sep 2 | MultiVendorX 5.0.13 - 5.0.14 - Unauthenticated Vendor PII and Payout Data Disclosure via stores REST Endpoint Affected: 5.0.13 before 5.0.15 |
| CVE-2026-16746 | 2.7 | Aug 5 | MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint Affected: before 5.0.11 |
Showing 5