agentprime: multivendorxEvery new CVE for multivendorx.https://agentprime.io/CVE-2026-114711: WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2026-114711/https://agentprime.io/advisories/CVE-2026-114711/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 18:30:44 GMTCVECVE-2026-108695: MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpointhttps://agentprime.io/advisories/CVE-2026-108695/https://agentprime.io/advisories/CVE-2026-108695/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 01:35:44 GMTCVECVE-2026-74926: MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST Endpointhttps://agentprime.io/advisories/CVE-2026-74926/https://agentprime.io/advisories/CVE-2026-74926/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 06:00:10 GMTCVECVE-2026-74925: MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administratorhttps://agentprime.io/advisories/CVE-2026-74925/https://agentprime.io/advisories/CVE-2026-74925/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 06:00:07 GMTCVECVE-2026-74927: MultiVendorX 5.0.13 - 5.0.14 - Unauthenticated Vendor PII and Payout Data Disclosure via stores REST Endpointhttps://agentprime.io/advisories/CVE-2026-74927/https://agentprime.io/advisories/CVE-2026-74927/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 06:00:18 GMTCVECVE-2026-66651: WordPress MultiVendorX plugin <= 5.0.20 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-66651/https://agentprime.io/advisories/CVE-2026-66651/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 13:59:53 GMTCVECVE-2026-66441: WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-66441/https://agentprime.io/advisories/CVE-2026-66441/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:36:53 GMTCVECVE-2026-16746: MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpointhttps://agentprime.io/advisories/CVE-2026-16746/https://agentprime.io/advisories/CVE-2026-16746/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 06:00:10 GMTCVECVE-2026-16605: MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorizationhttps://agentprime.io/advisories/CVE-2026-16605/https://agentprime.io/advisories/CVE-2026-16605/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 06:00:09 GMTCVECVE-2025-49916: WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2025-49916/https://agentprime.io/advisories/CVE-2025-49916/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Oct 2025 14:32:12 GMTCVECVE-2025-48261: WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-48261/https://agentprime.io/advisories/CVE-2025-48261/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Jun 2025 15:53:56 GMTCVECVE-2025-48263: WordPress MultiVendorX plugin <= 4.2.22 - Cross Site Scripting (XSS) Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-48263/https://agentprime.io/advisories/CVE-2025-48263/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 May 2025 14:45:11 GMTCVECVE-2025-24706: WordPress MultiVendorX plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2025-24706/https://agentprime.io/advisories/CVE-2025-24706/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jan 2025 17:25:03 GMTCVECVE-2023-51355: WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2023-51355/https://agentprime.io/advisories/CVE-2023-51355/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Dec 2024 11:29:50 GMTCVE