İçeriğe atla
Noroxi

MultiVendorX – WooCommerce Multivendor Marketplace Solutions

dc-woocommerce-multi-vendor · eklenti

MultiVendorX – WooCommerce Multivendor Marketplace Solutions için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

20 bilinen açık

2 kritik · 1 kayıt için istismar kodu yayımlanmış · son kayıt 18 Ağu 2026

Güvenlik açıkları

  • CVE-2025-0493

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion

    Kritik 9.8

  • CVE-2024-8289

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeove

    Kritik 9.8

  • CVE-2024-31304

    WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerability

    Yüksek 8.8

  • CVE-2025-49916

    WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability

    Yüksek 8.6

  • CVE-2024-24703

    WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability

    Yüksek 8.6

  • CVE-2023-51355

    WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability

    Yüksek 8.2

  • CVE-2026-66441

    WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability

    Yüksek 7.5

  • CVE-2025-48261

    WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability

    Yüksek 7.5

  • CVE-2024-43213

    WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability

    Yüksek 7.1

  • CVE-2026-66651

    WordPress MultiVendorX plugin <= 5.0.19 - Broken Access Control vulnerability

    Orta 6.5

  • CVE-2026-12941

    MultiVendorX <= 5.0.9 - Authenticated (Store Owner+) SQL Injection via 'order_by' Parameter

    Orta 6.5

  • CVE-2025-2789

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion

    Orta 6.5

  • CVE-2025-24706

    WordPress MultiVendorX plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2024-30433

    WordPress MultiVendorX Marketplace plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2024-9943

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates

    Orta 6.3

  • CVE-2025-48263

    WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability

    Orta 5.4

  • CVE-2024-5259

    MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation

    Orta 5.4

  • CVE-2025-4101

    MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion

    Orta 4.3

  • CVE-2024-9531

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending

    Orta 4.3

  • CVE-2020-36741→ 3.5.8

    MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass

    Orta 4.3

← Dizine dön