WC
Vendor
wcmp
10
CVEs
0
On KEV
0
New 30D
Products
MW9.8
MultiVendorX – WooCommerce Multivendor Marketplace Solutions
wcmp
8 CVEs0 on KEV0 new
MW6.5
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions
wcmp
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-12951 | MW MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions wcmp | 6.5 | Oct 2 | MultiVendorX <= 5.0.18 - Authenticated (Store Manager+) SQL Injection via 'order_by' Parameter |
| CVE-2026-12941 | MW MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions wcmp | 6.5 | Jul 16 | MultiVendorX <= 5.0.9 - Authenticated (Store Owner+) SQL Injection via 'order_by' Parameter |
| CVE-2025-4101 | MW MultiVendorX – WooCommerce Multivendor Marketplace Solutions wcmp | 4.3 | May 17 | MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion |
| CVE-2025-2789 | MW MultiVendorX – WooCommerce Multivendor Marketplace Solutions wcmp | 6.5 | Apr 5 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion |
| CVE-2025-0493 | MW MultiVendorX – WooCommerce Multivendor Marketplace Solutions wcmp | 9.8 | Jan 31 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion |
| CVE-2024-9943 | MW MultiVendorX – WooCommerce Multivendor Marketplace Solutions wcmp | 6.3 | Oct 24 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates |
| CVE-2024-9531 | MW MultiVendorX – WooCommerce Multivendor Marketplace Solutions wcmp | 4.3 | Oct 24 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending |
| CVE-2024-8289 | MW MultiVendorX – WooCommerce Multivendor Marketplace Solutions wcmp | 9.8 | Sep 4 | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover |
| CVE-2024-5259 | MW MultiVendorX – WooCommerce Multivendor Marketplace Solutions wcmp | 5.4 | Jun 6 | MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter |
| CVE-2020-36741 | MW MultiVendorX – WooCommerce Multivendor Marketplace Solutions wcmp | 4.3 | Jul 1 | MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass |