Multivendorx develops WordPress e-commerce plugins including product catalog and stock management extensions that extend WooCommerce functionality for online retailers. The vendor's vulnerabilities skew toward serious outcomes and concentrate on authentication and authorization gaps, input-handling issues including cross-site scripting, cross-site request forgery, and exposure of sensitive data—weakness classes endemic to web application plugins where access controls and input boundaries are frequently underspecified. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Multivendorx over time
Signals from CVEs in this vendor scope (17 CVEs).
17 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-0493CRITICAL The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited Local File Inclusion in all versions up to, and includin | Jan 31, 2025 | 9.8 | 30 | NO | NO |
CVE-2024-8289CRITICAL The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to privilege escalation/de-escalation and account takeover due to an | Sep 4, 2024 | 9.8 | 29 | NO | NO |
CVE-2025-49916HIGH Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mult | Oct 22, 2025 | 8.6 | 26 | NO | NO |
CVE-2024-31304HIGH Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3. | Jun 9, 2024 | 8.8 | 25 | NO | NO |
CVE-2024-25929CRITICAL Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendo | Jun 9, 2024 | 9.1 | 24 | NO | NO |
CVE-2023-51355HIGH Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe | Dec 9, 2024 | 8.2 | 23 | NO | NO |
CVE-2025-48261HIGH Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Retrieve Embedded Sensitive Data.This issue affects | Jun 9, 2025 | 7.5 | 21 | NO | NO |
CVE-2025-2789MEDIUM The MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy plugin for WordPress is vulnerable to unauthorized loss | Apr 5, 2025 | 6.5 | 21 | NO | NO |
CVE-2023-37972HIGH Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MultiVendorX Product Stock Manager & Notifier for WooCommerce.This issue affects Product Stock Manager & | Nov 30, 2023 | 7.5 | 20 | NO | NO |
CVE-2025-48263MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Stored XSS.This i | May 19, 2025 | 5.4 | 18 | NO | NO |
Signals from CVEs in this vendor scope (17 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Multivendorx.
Media articles that mention a CVE ID that affects a product developed by Multivendorx — matched by CVE ID, not by vendor name.