MultiVendorX

Products

ProductCVEsExploitedLatest
MultiVendorX9–Oct 30, 2026
WC Marketplace4–Aug 12, 2024
Product Catalog Enquiry for WooCommerce by MultiVendorX3–Sep 8, 2026
WooCommerce Product Stock Alert2–Jul 23, 2026
Product Stock Manager & Notifier for WooCommerce1–Nov 30, 2023

Exploited and recent CVEs

  • CVE-2026-114711 Medium 6.5 WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-108695 High 7.1 MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint 0.3%
  • CVE-2026-81792 Medium 6.5 WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.5 - Privilege Escalation vulnerability 0.3%
  • CVE-2026-66651 Medium 6.5 WordPress MultiVendorX plugin <= 5.0.20 - Broken Access Control vulnerability 0.3%
  • CVE-2026-66441 High 7.5 WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability 0.4%
  • CVE-2026-61945 Medium 6.5 WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2025-49916 High 8.6 WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability 0.3%
  • CVE-2025-48261 High 7.5 WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability 0.4%
  • CVE-2025-48263 Medium 6.5 WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-24706 Medium 6.5 WordPress MultiVendorX plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-37971 Medium 6.5 WordPress WooCommerce Product Stock Alert plugin <= 2.0.1 - Broken Access Control vulnerability 0.6%
  • CVE-2023-50899 Medium 5.4 WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 5.0.2 - Broken Access Control vulnerability 0.5%
  • CVE-2023-51355 High 8.2 WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability 0.5%
  • CVE-2024-43213 High 7.1 WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-24703 High 8.6 WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability 0.4%
  • CVE-2024-31304 High 7.1 WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerability 0.4%
  • CVE-2024-25929 Medium 6.5 WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability 0.3%
  • CVE-2024-30433 Medium 6.5 WordPress MultiVendorX Marketplace plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-37972 Medium 5.3 WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure 0.7%