Wcmp

8 CVEs across 2 Wcmp products. Browse Wcmp vulnerabilities, severities, and proof-of-concept exploits.

Wcmp products with known CVEs

ProductCVEs
Multivendorx – Woocommerce Multivendor Marketplace Solutions8
Multivendorx – Woocommerce Multivendor Marketplace Ai Powered Solutions1
Wcmp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-12941Medium6.52026-07-16The MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' para…
CVE-2025-4101Medium4.32025-05-17The MultiVendorX – WooCommerce Multivendor Marketplace Solutions plugin for WordPress is vulnerable to unauthorized loss of data due to a misconfigured capabil…
CVE-2025-2789Medium5.32025-04-05The MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy plugin for WordPress is vulnerable…
CVE-2025-0493Critical9.82025-01-31The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited Local File Inclusion in all version…
CVE-2024-9943Medium6.32024-10-24The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions u…
CVE-2024-9531Medium4.32024-10-24The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unauthorized modification of data due to a m…
CVE-2024-8289Critical9.82024-09-04The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to privilege escalation/de-escalation and accou…
CVE-2024-5259Medium6.42024-06-06The MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hover_an…
CVE-2020-36741Medium4.32023-07-01The MultiVendorX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.7. This is due to missing or incorrect…