MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution, CVE-2025-49916
- CVE, Research URL
- Home page URL
-
Security reports for MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution
- Published on
- Oct 22, 2025
- Research Description
- Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through <= 4.2.23.
- Affected versions
-
max 4.2.23.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| One Click Accessibility (CVE-2025-32640) , Apr 10, 2025 |
| One Click Accessibility (CVE-2025-10700) , Nov 10, 2025 |