CPE Details
MultiVendorX 4.2.21 for WordPress
4.2.21
2025-06-05
15h54 +00:00
15h54 +00:00
2025-06-05
15h54 +00:00
15h54 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:multivendorx:multivendorx:4.2.21:*:*:*:*:wordpress:*:*
Informations
Vendor
multivendorxProduct
multivendorxVersion
4.2.21Target Software
wordpressRelated CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX allows Retrieve Embedded Sensitive Data. This issue affects MultiVendorX: from n/a through 4.2.22. | 7.5 |
High |
||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MultiVendorX MultiVendorX allows Stored XSS. This issue affects MultiVendorX: from n/a through 4.2.22. | 6.5 |
Medium |
||
| The MultiVendorX – WooCommerce Multivendor Marketplace Solutions plugin for WordPress is vulnerable to unauthorized loss of data due to a misconfigured capability check on the 'delete_fpm_product' function in all versions up to, and including, 4.2.22. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary posts, pages, attachments, and products. The vulnerability was partially patched in version 4.2.22. | 4.3 |
Medium |
