MultiVendorX kayıtları
multivendorx üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %60
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-285 Improper Authorization1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-8289Kavram kanıtı | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeovemultivendorx · multivendorx · CWE-862 | Kritik9,8 | — | %1,3 | 4 Eyl 2024 |
39İzleyin | CVE-2025-0493İstismar yok | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusionmultivendorx · multivendorx · CWE-22 | Kritik9,8 | — | %1,0 | 31 Oca 2025 |
36İzleyin | CVE-2024-25929İstismar yok | WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerabilitymultivendorx · product catalog mode for woocommerce · CWE-862 | Kritik9,1 | — | %0,3 | 9 Haz 2024 |
35İzleyin | CVE-2024-31304İstismar yok | WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerabilitymultivendorx · multivendorx · CWE-862 | Yüksek8,8 | — | %0,4 | 9 Haz 2024 |
32İzleyin | CVE-2023-51355İstismar yok | WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerabilitymultivendorx · multivendorx · CWE-862 | Yüksek8,2 | — | %0,5 | 9 Ara 2024 |
30İzleyin | CVE-2023-37972İstismar yok | WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposuremultivendorx · product stock manager \& notifier for woocommerce · CWE-200 | Yüksek7,5 | — | %0,7 | 30 Kas 2023 |
30İzleyin | CVE-2025-48261İstismar yok | WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerabilitymultivendorx · multivendorx · CWE-201 | Yüksek7,5 | — | %0,3 | 9 Haz 2025 |
26İzleyin | CVE-2025-2789İstismar yok | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletionmultivendorx · multivendorx · CWE-862 | Orta6,5 | — | %0,4 | 5 Nis 2025 |
25İzleyin | CVE-2024-9943İstismar yok | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updatesmultivendorx · multivendorx · CWE-352 | Orta6,3 | — | %0,2 | 24 Eki 2024 |
24İzleyin | CVE-2023-5348İstismar yok | Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Updatemultivendorx · product catalog mode for woocommerce · CWE-79 | Orta6,1 | — | %0,5 | 18 Ara 2023 |
21İzleyin | CVE-2024-5259İstismar yok | MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animationmultivendorx · multivendorx · CWE-79 | Orta5,4 | — | %0,3 | 6 Haz 2024 |
21İzleyin | CVE-2025-48263İstismar yok | WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerabilitymultivendorx · multivendorx · CWE-79 | Orta5,4 | — | %0,2 | 19 May 2025 |
17İzleyin | CVE-2020-36741İstismar yok | MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypassmultivendorx · multivendorx · CWE-352 | Orta4,3 | — | %0,4 | 1 Tem 2023 |
17İzleyin | CVE-2024-9531İstismar yok | MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sendingmultivendorx · multivendorx · CWE-285 | Orta4,3 | — | %0,3 | 24 Eki 2024 |
17İzleyin | CVE-2025-4101İstismar yok | MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletionmultivendorx · multivendorx · CWE-863 | Orta4,3 | — | %0,3 | 17 May 2025 |
- CVE-2024-828939İzleyin
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeove
KritikCVSS 9,8Kavram kanıtıEPSS %1multivendorx · multivendorx4 Eyl 2024
- CVE-2025-049339İzleyin
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion
KritikCVSS 9,8İstismar yokEPSS %1multivendorx · multivendorx31 Oca 2025
- CVE-2024-2592936İzleyin
WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability
KritikCVSS 9,1İstismar yokEPSS %0multivendorx · product catalog mode for woocommerce9 Haz 2024
- CVE-2024-3130435İzleyin
WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0multivendorx · multivendorx9 Haz 2024
- CVE-2023-5135532İzleyin
WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability
YüksekCVSS 8,2İstismar yokEPSS %1multivendorx · multivendorx9 Ara 2024
- CVE-2023-3797230İzleyin
WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure
YüksekCVSS 7,5İstismar yokEPSS %1multivendorx · product stock manager \& notifier for woocommerce30 Kas 2023
- CVE-2025-4826130İzleyin
WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0multivendorx · multivendorx9 Haz 2025
- CVE-2025-278926İzleyin
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion
OrtaCVSS 6,5İstismar yokEPSS %0multivendorx · multivendorx5 Nis 2025
- CVE-2024-994325İzleyin
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates
OrtaCVSS 6,3İstismar yokEPSS %0multivendorx · multivendorx24 Eki 2024
- CVE-2023-534824İzleyin
Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update
OrtaCVSS 6,1İstismar yokEPSS %1multivendorx · product catalog mode for woocommerce18 Ara 2023
- CVE-2024-525921İzleyin
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation
OrtaCVSS 5,4İstismar yokEPSS %0multivendorx · multivendorx6 Haz 2024
- CVE-2025-4826321İzleyin
WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0multivendorx · multivendorx19 May 2025
- CVE-2020-3674117İzleyin
MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass
OrtaCVSS 4,3İstismar yokEPSS %0multivendorx · multivendorx1 Tem 2023
- CVE-2024-953117İzleyin
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending
OrtaCVSS 4,3İstismar yokEPSS %0multivendorx · multivendorx24 Eki 2024
- CVE-2025-410117İzleyin
MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion
OrtaCVSS 4,3İstismar yokEPSS %0multivendorx · multivendorx17 May 2025