Lucene search

CVE-2024-9943

🗓️ 24 Oct 2024 08:02:15Reported by [email protected]Type

The MultiVendorX plugin for WordPress up to version 4.2.4 is vulnerable to Cross-Site Request Forger

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2024-9943 MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates	24 Oct 202407:35	–	vulnrichment
Cvelist	CVE-2024-9943 MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates	24 Oct 202407:35	–	cvelist
Patchstack	WordPress WC Marketplace Plugin <= 4.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	23 Oct 202400:00	–	patchstack
NVD	CVE-2024-9943	24 Oct 202408:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 21, 2024 to October 27, 2024)	31 Oct 202415:37	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.1/api/class-mvx-rest-controller.php
plugins	www.plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.1/api/class-mvx-rest-controller.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b950faf9-2122-42af-9f05-ec850767be32
plugins	www.plugins.trac.wordpress.org/changeset/3173238/dc-woocommerce-multi-vendor/trunk/api/class-mvx-rest-controller.php
plugins	www.plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.1/api/class-mvx-rest-controller.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Oct 2024 08:15Current

6.1Medium risk

Vulners AI Score6.1

CVSS36.3

EPSS0.001

CWE-352