Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

MultiVendorX — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in MultiVendorX, with AI-generated Chinese analysis, references, and POCs.

Vendor: MultiVendorX

CVE ID Title CVSS Severity Published
CVE-2026-74926 MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST Endpoint - - 2026-09-16
CVE-2026-74925 MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator - - 2026-09-11
CVE-2026-74927 MultiVendorX 5.0.13 - 5.0.14 - Unauthenticated Vendor PII and Payout Data Disclosure via stores REST Endpoint - - 2026-09-02
CVE-2026-66651 WordPress MultiVendorX plugin <= 5.0.19 - Broken Access Control vulnerability CWE-862 6.5 Medium 2026-08-18
CVE-2026-66441 WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability CWE-862 7.5 High 2026-08-13
CVE-2026-16605 MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorization - - 2026-08-05
CVE-2026-16746 MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint - - 2026-08-05
CVE-2025-49916 WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability CWE-862 8.6 High 2025-10-22
CVE-2025-48261 WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability CWE-201 7.5 High 2025-06-09
CVE-2025-48263 WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-05-19
CVE-2025-24706 WordPress MultiVendorX plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-01-24
CVE-2023-51355 WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability CWE-862 8.2 High 2024-12-09

All 12 known CVE vulnerabilities affecting MultiVendorX with full Chinese analysis, references, and POCs where available.