Security
فارسی
All products

dc-woocommerce-multi-vendor

WordPress · Plugin
34 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.20 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-114711 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.19 - Missing AuthorizationCVE-2026-108695 dc-woocommerce-multi-vendor WordPress Medium No fix reported
MultiVendorX <= 5.0.18 - Authenticated (Store Manager+) SQL Injection via 'order_by' ParameterCVE-2026-12951 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX <= 5.0.15 - Missing AuthorizationCVE-2026-74926 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.17 - Missing AuthorizationCVE-2026-66651 dc-woocommerce-multi-vendor WordPress Medium No fix reported
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 5.0.0 - 5.0.15 - Authenticated (Custom Role+) Privilege EscalationCVE-2026-74925 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 5.0.13 - 5.0.14 - Unauthenticated Information ExposureCVE-2026-74927 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Store Owner+) Cross-Store Commission Data DisclosureCVE-2026-16746 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions < 5.0.11 - Missing AuthorizationCVE-2026-16605 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.10 - Missing AuthorizationCVE-2026-66441 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX <= 5.0.9 - Authenticated (Store Owner+) SQL Injection via 'order_by' ParameterCVE-2026-12941 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX <= 4.2.23 - Missing AuthorizationCVE-2025-49916 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX <= 4.2.22 - Unauthenticated Information ExposureCVE-2025-48261 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX <= 4.2.22 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-48263 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post DeletionCVE-2025-4101 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates DeletionCVE-2025-2789 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File InclusionCVE-2025-0493 dc-woocommerce-multi-vendor WordPress Critical Fix reported
WC Marketplace <= 4.2.13 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-24706 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor UpdatesCVE-2024-9943 dc-woocommerce-multi-vendor WordPress Medium Fix reported
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email SendingCVE-2024-9531 dc-woocommerce-multi-vendor WordPress Medium Fix reported