MultiVendorX records

15 published records for vendor multivendorx.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 60%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

15 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-8289Proof of concept	MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeovemultivendorx · multivendorx · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	1.2%	Sep 4, 2024
39Monitor	CVE-2025-0493No exploit	MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusionmultivendorx · multivendorx · CWE-22 Pre-auth Path traversal	Critical9.8	—	1.0%	Jan 31, 2025
36Monitor	CVE-2024-25929No exploit	WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerabilitymultivendorx · product catalog mode for woocommerce · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.3%	Jun 9, 2024
35Monitor	CVE-2024-31304No exploit	WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerabilitymultivendorx · multivendorx · CWE-862 Broken access control (IDOR)	High8.8	—	0.3%	Jun 9, 2024
32Monitor	CVE-2023-51355No exploit	WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerabilitymultivendorx · multivendorx · CWE-862 Pre-auth Broken access control (IDOR)	High8.2	—	0.5%	Dec 9, 2024
30Monitor	CVE-2023-37972No exploit	WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposuremultivendorx · product stock manager \& notifier for woocommerce · CWE-200 Pre-auth Info leak	High7.5	—	0.6%	Nov 30, 2023
30Monitor	CVE-2025-48261No exploit	WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerabilitymultivendorx · multivendorx · CWE-201 Pre-auth	High7.5	—	0.3%	Jun 9, 2025
26Monitor	CVE-2025-2789No exploit	MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletionmultivendorx · multivendorx · CWE-862 Pre-auth Broken access control (IDOR)	Medium6.5	—	0.3%	Apr 5, 2025
25Monitor	CVE-2024-9943No exploit	MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updatesmultivendorx · multivendorx · CWE-352 Pre-auth CSRF	Medium6.3	—	0.2%	Oct 24, 2024
24Monitor	CVE-2023-5348No exploit	Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Updatemultivendorx · product catalog mode for woocommerce · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Dec 18, 2023
21Monitor	CVE-2024-5259No exploit	MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animationmultivendorx · multivendorx · CWE-79 XSS	Medium5.4	—	0.3%	Jun 6, 2024
21Monitor	CVE-2025-48263No exploit	WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerabilitymultivendorx · multivendorx · CWE-79 XSS	Medium5.4	—	0.2%	May 19, 2025
17Monitor	CVE-2020-36741No exploit	MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypassmultivendorx · multivendorx · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Jul 1, 2023
17Monitor	CVE-2024-9531No exploit	MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sendingmultivendorx · multivendorx · CWE-285 Broken access control (IDOR)	Medium4.3	—	0.3%	Oct 24, 2024
17Monitor	CVE-2025-4101No exploit	MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletionmultivendorx · multivendorx · CWE-863 Broken access control (IDOR)	Medium4.3	—	0.3%	May 17, 2025

CVE-2024-8289
39Monitor
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeove
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
- Broken access control (IDOR)
multivendorx · multivendorxSep 4, 2024
CVE-2025-0493
39Monitor
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Path traversal
multivendorx · multivendorxJan 31, 2025
CVE-2024-25929
36Monitor
WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
multivendorx · product catalog mode for woocommerceJun 9, 2024
CVE-2024-31304
35Monitor
WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
multivendorx · multivendorxJun 9, 2024
CVE-2023-51355
32Monitor
WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
multivendorx · multivendorxDec 9, 2024
CVE-2023-37972
30Monitor
WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
multivendorx · product stock manager \& notifier for woocommerceNov 30, 2023
CVE-2025-48261
30Monitor
WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
multivendorx · multivendorxJun 9, 2025
CVE-2025-2789
26Monitor
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
multivendorx · multivendorxApr 5, 2025
CVE-2024-9943
25Monitor
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
- CSRF
multivendorx · multivendorxOct 24, 2024
CVE-2023-5348
24Monitor
Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
multivendorx · product catalog mode for woocommerceDec 18, 2023
CVE-2024-5259
21Monitor
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation
MediumCVSS 5.4No exploitEPSS 0%
- XSS
multivendorx · multivendorxJun 6, 2024
CVE-2025-48263
21Monitor
WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
multivendorx · multivendorxMay 19, 2025
CVE-2020-36741
17Monitor
MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
multivendorx · multivendorxJul 1, 2023
CVE-2024-9531
17Monitor
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
multivendorx · multivendorxOct 24, 2024
CVE-2025-4101
17Monitor
MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
multivendorx · multivendorxMay 17, 2025