WC Marketplace vulnerabilities

2 known vulnerabilities in WC Marketplace from MultiVendorX. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  MultiVendorX: Missing Authorization

  CVE-2023-51355Dec 9, 2024MultiVendorX

  Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through <= 4.0.23.

• 7.1 High severity

  WC Marketplace: Improper Neutralization of Input During Web Page Generation

  CVE-2024-43213Aug 12, 2024MultiVendorX

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MultiVendorX WC Marketplace allows Reflected XSS.This issue affects WC Marketplace: from n/a through 4.1.17.