MW
Product
MultiVendorX – WooCommerce Multivendor Marketplace Solutions
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 6Low 0
Watch
Add MultiVendorX – WooCommerce Multivendor Marketplace Solutions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0493 | 9.8 | Jan 31 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion Affected: through 4.2.14 |
| CVE-2024-8289 | 9.8 | Sep 4 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover Affected: through 4.2.0 |
| CVE-2025-2789 | 6.5 | Apr 5 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion Affected: through 4.2.19 |
| CVE-2024-9943 | 6.3 | Oct 24 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates Affected: through 4.2.4 |
| CVE-2024-5259 | 5.4 | Jun 6 | MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter Affected: through 4.1.11 |
| CVE-2025-4101 | 4.3 | May 17 | MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion Affected: through 4.2.22 |
| CVE-2024-9531 | 4.3 | Oct 24 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending Affected: through 4.2.4 |
| CVE-2020-36741 | 4.3 | Jul 1 | MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass Affected: before 3.5.8 |
Showing 8