MultiVendorX vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

MU

Product

MultiVendorX

by multivendorx · last CVE Oct 30, 2026

18

CVEs

0

On KEV

9.8

Max CVSS

2

New 30D

Vulnerabilities18 In the news0 Timeline

Severity mix

Critical 2High 6Medium 10Low 0

Severity

All severities18 Critical2 High6 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add MultiVendorX to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-31304	8.8	0%	Jun 9	WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerability Affected: before 4.1.4
CVE-2025-49916	8.6	0%	Oct 22	WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability Affected: through 4.2.23
CVE-2023-51355	8.2	1%	Dec 9	WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability Affected: through 4.0.23
CVE-2026-66441	7.5	0%	Aug 13	WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability Affected: through 5.0.10
CVE-2025-48261	7.5	0%	Jun 9	WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability Affected: through 4.2.22
CVE-2026-108695	7.1	0%	Oct 11	MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint Affected: through 5.0.19