Advisories · Technology
wcmp MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions.
Every CVE that names wcmp MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
MultiVendorX <= 5.0.18 - Authenticated (Store Manager+) SQL Injection via 'order_by' Parameter
- wcmp MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions
- SQL injection
- CVSS 6.5 Medium
MultiVendorX <= 5.0.9 - Authenticated (Store Owner+) SQL Injection via 'order_by' Parameter
- wcmp MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions
- SQL injection