PatchTheCVEmultivendorx vulnerabilities
Recent CVEs affecting multivendorx products. 10 tracked.
multivendorx has 10 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-06-09. Highest priority: CVE-2024-8289 (score 57/100).
- CVE-2025-4101 MEDIUM 4.3 UPGRADE The MultiVendorX – WooCommerce Multivendor Marketplace Solutions plugin for WordPress is vulnerable to unautho
- CVE-2025-48263 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MultiVen
- CVE-2025-48261 HIGH 7.5 UPGRADE Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX dc-woocommerce-mu
- CVE-2025-0493 CRITICAL 9.8 UPGRADE The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerabl
- CVE-2024-9943 MEDIUM 6.3 UPGRADE The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerabl
- CVE-2024-9531 MEDIUM 4.3 UPGRADE The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerabl
- CVE-2024-8289 CRITICAL 9.8 UPGRADE The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerabl
- CVE-2024-5259 MEDIUM 6.4 UPGRADE The MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution plugin for WordPress is vulnerable
- CVE-2024-31304 HIGH 7.1 UPGRADE Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a
- CVE-2024-25929 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX.Th
FAQ
How do I fix multivendorx vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is multivendorx being exploited right now?
None of the tracked multivendorx CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which multivendorx CVE should I patch first?
CVE-2024-8289 currently ranks highest (57/100): The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerabl.