Login Request a demo
MU
Product
MultiVendorX
by multivendorx · last CVE Oct 30, 2026
18
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 2High 6Medium 10Low 0
Severity
All severities18Critical2High6Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MultiVendorX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114711
New
6.5
0%
Oct 30
WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerability
Affected: through 5.0.20
CVE-2026-66651
6.5
0%
Aug 18
WordPress MultiVendorX plugin <= 5.0.20 - Broken Access Control vulnerability
Affected: through 5.0.20
CVE-2025-2789
6.5
0%
Apr 5
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion
Affected: before 4.2.20
CVE-2025-24706
6.5
0%
Jan 24
WordPress MultiVendorX plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
Affected: through 4.2.13
CVE-2024-9943
6.3
0%
Oct 24
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates
Affected: before 4.2.5
CVE-2025-48263
5.4
0%
May 19
WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability
Affected: through 4.2.22
CVE-2024-5259
5.4
0%
Jun 6
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter
Affected: before 4.1.12
CVE-2025-4101
4.3
0%
May 17
MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion
Affected: before 4.2.23
CVE-2024-9531
4.3
0%
Oct 24
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending
Affected: before 4.2.5
CVE-2020-36741
4.3
0%
Jul 1
MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass
Affected: through 3.5.7
Showing 10