Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 32
Reset filtersMultiVendorX <= 5.0.15 - Missing Authorization
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 5.0.0 - 5.0.15 - Authenticated (Custom Role+) Privilege Escalation
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 5.0.13 - 5.0.14 - Unauthenticated Information Exposure
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.17 - Missing Authorization
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.10 - Missing Authorization
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions < 5.0.11 - Missing Authorization
MultiVendorX <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Store Owner+) Cross-Store Commission Data Disclosure
MultiVendorX <= 5.0.9 - Authenticated (Store Owner+) SQL Injection via 'order_by' Parameter
MultiVendorX <= 4.2.23 - Missing Authorization
MultiVendorX <= 4.2.22 - Unauthenticated Information Exposure
MultiVendorX <= 4.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion
WC Marketplace <= 4.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Arbitrary Vendor Deletion
WC Marketplace <= 4.1.17 - Reflected Cross-Site Scripting
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter
WC Marketplace <= 4.1.3 - Missing Authorization
WC Marketplace <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
MultiVendorX Marketplace <= 4.0.25 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.