Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

MultiVendorX — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in MultiVendorX, with AI-generated Chinese analysis, references, and POCs.

Vendor: MultiVendorX

CVE IDTitleCVSSSeverityPublished
CVE-2026-16605 MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorization --2026-08-05
CVE-2026-16746 MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint --2026-08-05
CVE-2025-49916 WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability CWE-862 8.6 High2025-10-22
CVE-2025-48261 WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability CWE-201 7.5 High2025-06-09
CVE-2025-48263 WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium2025-05-19
CVE-2025-24706 WordPress MultiVendorX plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2025-01-24
CVE-2023-51355 WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability CWE-862 8.2 High2024-12-09

All 7 known CVE vulnerabilities affecting MultiVendorX with full Chinese analysis, references, and POCs where available.