MultiVendorX

Records30All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

MultiVendorX records in CISA KEV

No MultiVendorX vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Multivendorx 11 records MEDIUM Product Catalog Mode For Woocommerce 2 records LOW Product Stock Manager & Notifier For Woocommerce 1 record LOW

Records

2 records in Product Catalog Mode For Woocommerce · all components

TI-2024-17029 CVE-2024-25929 · GHSA-rr2g-6254-88hc

WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.5.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00319 Published 2024-06-09 No fix listed CWE-862

TI-2023-04921 CVE-2023-5348 · GHSA-v6cw-g4v9-gjmf

Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update

LOW 28

The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or escape settings values, leading to stored XSS by unauthenticated users.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00531 Published 2023-12-18 Fixed in 5.0.3 CWE-79

Open these records in search →

Critical	3
High	9
Medium	18
Low	0
No CVSS	0