PT-2026-67985

Name of the Vulnerable Software and Affected Versions MultiVendorX WordPress plugin versions prior to 5.0.11 Description An issue exists where the plugin fails to verify if the requested store belongs to the current user within a REST API endpoint. This allows any user with vendor-level privilege...

PT-2026-67982

Name of the Vulnerable Software and Affected Versions MultiVendorX WordPress plugin versions prior to 5.0.11 Description An authentication bypass issue exists in the REST API where the plugin fails to verify if the targeted store belongs to the requesting vendor. This allows an authenticated user...