MultiVendorX – MultiVendor Marketplace Solution For WooCommerce

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   MultiVendorX – MultiVendor Marketplace Solution For WooCommerce

Information

Software Type Plugin
Software Slug dc-woocommerce-multi-vendor (view on wordpress.org)
Software Status Active
Software Author wcmp
Software Website multivendorx.com
Software Downloads 768,485
Software Active Installs 7,000
Software Record Last Updated November 29, 2023

8 Vulnerabilities

MultiVendorX <= 4.0.25 - Improper Authorization on REST Routes via 'save_settings_permission'
8.6
CVE ID Unknown
Sep 12, 2023
Researchers:
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Aug 15, 2022
Researcher: WPScanTeam
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Local File Inclusion
8.2
CVE ID Unknown
Aug 15, 2022
Researcher: WPScanTeam
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Multiple Unprotected AJAX Actions
7.3
CVE-2022-2657
Aug 15, 2022
Researcher: WPScanTeam
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Cross-Site Request Forgery
8.8
CVE-2022-2657
Aug 4, 2022
Researcher: moumitahalder
Multivendor Marketplace Solution for WooCommerce – WC Marketplace < 3.8.4 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Dec 6, 2021
Researcher: WPScanTeam
Multivendor Marketplace Solution for WooCommerce <= 3.7.3 - Insecure Direct Object Reference
4.3
CVE ID Unknown
May 26, 2021
Researcher: WPScanTeam
MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass
4.3
CVE-2020-36741
Sep 16, 2020
Researcher: Jerome Bruandet
Title CVE ID CVSS Researchers Date
MultiVendorX <= 4.0.25 - Improper Authorization on REST Routes via 'save_settings_permission' 8.6 September 12, 2023
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Reflected Cross-Site Scripting 6.1 WPScanTeam August 15, 2022
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Local File Inclusion 8.2 WPScanTeam August 15, 2022
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Multiple Unprotected AJAX Actions CVE-2022-2657 7.3 WPScanTeam August 15, 2022
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Cross-Site Request Forgery CVE-2022-2657 8.8 moumitahalder August 4, 2022
Multivendor Marketplace Solution for WooCommerce – WC Marketplace < 3.8.4 - Reflected Cross-Site Scripting 6.1 WPScanTeam December 6, 2021
Multivendor Marketplace Solution for WooCommerce <= 3.7.3 - Insecure Direct Object Reference 4.3 WPScanTeam May 26, 2021
MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass CVE-2020-36741 4.3 Jerome Bruandet September 16, 2020

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation