MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution, f548eae4e89d0f9e3ef672600e4cb4501ec056ed
- CVE, Research URL
- Home page URL
-
Security reports for MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution
- Published on
- May 26, 2021
- Research Description
- MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions [dc-woocommerce-multi-vendor] < 3.7.4 Multivendor Marketplace Solution for WooCommerce <= 3.7.3 - Insecure Direct Object Reference The Multivendor Marketplace Solution for WooCommerce plugin for WordPress is vulnerable to users commenting as a different user in versions up to, and including, 3.7.3. This is due to improper user ID validation and and capability checking This makes it possible for unauthenticated attackers to post unwanted arbitrary comments as other users.
- Affected versions
-
max 3.7.4.
- Status
-
vulnerable