CVE-2026-81792— WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.4 - Privilege Escalation vulnerability
Quick assessment
Affected
MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WooCommerce by MultiVendorX 的产品目录询价功能存在未经身份验证的特权提升漏洞，受影响版本为 6.1.4 及更早版本。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-81792
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.4 - Privilege Escalation vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Unauthenticated Privilege Escalation in Product Catalog Enquiry for WooCommerce by MultiVendorX <= 6.1.4 versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
特权授予不正确
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MultiVendorX | Product Catalog Enquiry for WooCommerce by MultiVendorX | n/a ~ 6.1.4 | - |
|
II. Public POCs for CVE-2026-81792
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-81792
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-81792 (1)
IV. Related Vulnerabilities
Same vendor: MultiVendorX
-
CVE-2026-66651
WordPress MultiVendorX plugin <= 5.0.14 - Broken Access Cont -
CVE-2026-66441
WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Cont -
CVE-2026-61945
WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - -
CVE-2025-49916
WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Cont -
CVE-2025-48261
WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exp
Same weakness: CWE-266
-
CVE-2026-86500
JetBrains YouTrack 2026.1.14047 前 权限提升 -
CVE-2026-86482
JetBrains YouTrack 2026.2.18634前越权漏洞 -
CVE-2026-84814
WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalati -
CVE-2026-84756
WordPress WCFM Membership plugin <= 2.11.11 - Privilege Esca -
CVE-2026-81769
WordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation
V. Comments for CVE-2026-81792
No comments yet