MU
Vendor
multivendorx
31
CVEs
0
On KEV
2
New 30D
Products
MU9.8
MultiVendorX
multivendorx
18 CVEs0 on KEV2 new
WM8.8
WC Marketplace
MultiVendorX
5 CVEs0 on KEV0 new
PC9.1
Product Catalog Enquiry for WooCommerce by MultiVendorX
MultiVendorX
3 CVEs0 on KEV0 new
PC9.1
Product Catalog Mode For Woocommerce
Multivendorx
2 CVEs0 on KEV0 new
WP6.5
WooCommerce Product Stock Alert
MultiVendorX
2 CVEs0 on KEV0 new
PS7.5
Product Stock Manager & Notifier for WooCommerce
MultiVendorX
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114711 New | MU MultiVendorX MultiVendorX | 6.5 | Oct 30 | WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-108695 | MU MultiVendorX multivendorx | 7.1 | Oct 11 | MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint |
| CVE-2026-81792 | PC Product Catalog Enquiry for WooCommerce by MultiVendorX MultiVendorX | 6.5 | Sep 8 | WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.5 - Privilege Escalation vulnerability |
| CVE-2026-66651 | MU MultiVendorX MultiVendorX | 6.5 | Aug 18 | WordPress MultiVendorX plugin <= 5.0.20 - Broken Access Control vulnerability |
| CVE-2026-66441 | MU MultiVendorX MultiVendorX | 7.5 | Aug 13 | WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability |
| CVE-2026-61945 | WP WooCommerce Product Stock Alert MultiVendorX | 6.5 | Jul 23 | WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability |
| CVE-2025-49916 | MU MultiVendorX MultiVendorX | 8.6 | Oct 22 | WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability |
| CVE-2025-48261 | MU MultiVendorX MultiVendorX | 7.5 | Jun 9 | WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability |
| CVE-2025-48263 | MU MultiVendorX MultiVendorX | 5.4 | May 19 | WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-4101 | MU Multivendorx Multivendorx | 4.3 | May 17 | MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion |
| CVE-2025-2789 | MU Multivendorx Multivendorx | 6.5 | Apr 5 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion |
| CVE-2025-0493 | MU Multivendorx Multivendorx | 9.8 | Jan 31 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion |
| CVE-2025-24706 | MU MultiVendorX MultiVendorX | 6.5 | Jan 24 | WordPress MultiVendorX plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-37971 | WP WooCommerce Product Stock Alert MultiVendorX | 6.5 | Dec 13 | WordPress WooCommerce Product Stock Alert plugin <= 2.0.1 - Broken Access Control vulnerability |
| CVE-2023-50899 | PC Product Catalog Enquiry for WooCommerce by MultiVendorX MultiVendorX | 5.4 | Dec 9 | WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 5.0.2 - Broken Access Control vulnerability |
| CVE-2023-51355 | MU MultiVendorX MultiVendorX | 8.2 | Dec 9 | WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability |
| CVE-2024-9943 | MU Multivendorx Multivendorx | 6.3 | Oct 24 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates |
| CVE-2024-9531 | MU Multivendorx Multivendorx | 4.3 | Oct 24 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending |
| CVE-2024-8289 | MU Multivendorx Multivendorx | 9.8 | Sep 4 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover |
| CVE-2024-43213 | WM WC Marketplace MultiVendorX | 7.1 | Aug 12 | WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-24703 | WM WC Marketplace MultiVendorX | 8.6 | Jun 11 | WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability |
| CVE-2024-31304 | WM WC Marketplace MultiVendorX | 8.8 | Jun 9 | WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerability |
| CVE-2024-25929 | PC Product Catalog Enquiry for WooCommerce by MultiVendorX MultiVendorX | 9.1 | Jun 9 | WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability |
| CVE-2024-5259 | MU Multivendorx Multivendorx | 5.4 | Jun 6 | MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter |
| CVE-2024-30433 | WM WC Marketplace MultiVendorX | 6.5 | Mar 29 | WordPress MultiVendorX Marketplace plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-5348 | PC Product Catalog Mode For Woocommerce Multivendorx | 6.1 | Dec 18 | Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update |
| CVE-2023-37972 | PS Product Stock Manager & Notifier for WooCommerce MultiVendorX | 7.5 | Nov 30 | WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure |
| CVE-2020-36741 | MU Multivendorx Multivendorx | 4.3 | Jul 1 | MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass |