Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
wcmp

wcmp MultiVendorX – WooCommerce Multivendor Marketplace Solutions vulnerabilities

8 published CVEs name wcmp MultiVendorX – WooCommerce Multivendor Marketplace Solutions among the affected products.

Published CVEs
8
Last 12 months
0
Critical
2
Known exploited
0

Critical 2High 0Medium 6Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20244
  3. 20253

Newest CVEs

  • CVE-2025-4101

    MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion

    wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

    Medium4.3
  • CVE-2025-2789

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion

    wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

    Medium5.3
  • CVE-2025-0493

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion

    wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

    Critical9.8
  • CVE-2024-9943

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates

    wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

    Medium6.3
  • CVE-2024-9531

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending

    wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

    Medium4.3
  • CVE-2024-8289

    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover

    wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

    Critical9.8
  • CVE-2024-5259

    MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter

    wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

    Medium6.4
  • CVE-2020-36741

    MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass

    wcmp · MultiVendorX – WooCommerce Multivendor Marketplace Solutions

    Medium4.3