Wcmp vulnerabilities
We track 2 vulnerabilities in Wcmp products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 31, 2025.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Wcmp vulnerabilities
- 9.8 Critical severity
MultiVendorX – WooCommerce Multivendor…: Improper Limitation of a Pathname to a Restricted Directory
The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited Local File Inclusion in all versions up to, and including, 4.2.14 via the tabname parameter. This makes it possible for unauthenticated a
- 9.8 Critical severity
MultiVendorX – WooCommerce Multivendor…: Missing Authorization
The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to privilege escalation/de-escalation and account takeover due to an insufficient capability check on the update_item_permissions_check and create_i