MultiVendorX
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| MultiVendorX | 9 | – | Oct 30, 2026 |
| WC Marketplace | 4 | – | Aug 12, 2024 |
| Product Catalog Enquiry for WooCommerce by MultiVendorX | 3 | – | Sep 8, 2026 |
| WooCommerce Product Stock Alert | 2 | – | Jul 23, 2026 |
| Product Stock Manager & Notifier for WooCommerce | 1 | – | Nov 30, 2023 |
Exploited and recent CVEs
- CVE-2026-114711 WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-108695 MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint 0.3%
- CVE-2026-81792 WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.5 - Privilege Escalation vulnerability 0.3%
- CVE-2026-66651 WordPress MultiVendorX plugin <= 5.0.20 - Broken Access Control vulnerability 0.3%
- CVE-2026-66441 WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability 0.4%
- CVE-2026-61945 WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability 0.4%
- CVE-2025-49916 WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability 0.3%
- CVE-2025-48261 WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability 0.4%
- CVE-2025-48263 WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-24706 WordPress MultiVendorX plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2023-37971 WordPress WooCommerce Product Stock Alert plugin <= 2.0.1 - Broken Access Control vulnerability 0.6%
- CVE-2023-50899 WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 5.0.2 - Broken Access Control vulnerability 0.5%
- CVE-2023-51355 WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability 0.5%
- CVE-2024-43213 WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-24703 WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability 0.4%
- CVE-2024-31304 WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerability 0.4%
- CVE-2024-25929 WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability 0.3%
- CVE-2024-30433 WordPress MultiVendorX Marketplace plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2023-37972 WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure 0.7%