Lucene search
+L

267 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2024-29200

Malicious code in bioql PyPI...

8.8CVSS8.9AI score0.00371EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-23231

Malicious code in bioql PyPI...

9.1CVSS9.1AI score0.00319EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/06/12 3:37 p.m.•18 views

WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin MultiVendorX versions = 4.2.23...

8.6CVSS7AI score0.00328EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/06/11 4:03 p.m.•24 views

CVE-2025-48261

Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Retrieve Embedded Sensitive Data.This issue affects MultiVendorX: from n/a through = 4.2.22...

7.5CVSS5.9AI score0.00345EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/09 4:15 p.m.•15 views

CVE-2025-48261

Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX allows Retrieve Embedded Sensitive Data. This issue affects MultiVendorX: from n/a through 4.2.22...

7.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/09 4:15 p.m.•32 views

CVE-2025-48261

Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Retrieve Embedded Sensitive Data.This issue affects MultiVendorX: from n/a through = 4.2.22...

7.5CVSS0.00345EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/09 3:53 p.m.•73 views

CVE-2025-48261

CVE-2025-48261 is an information exposure issue in MultiVendorX (WordPress plugin) described as an insertion of sensitive information into sent data, allowing retrieval of embedded sensitive data. Affected releases range up to 4.2.22; multiple sources label the CVE with a CVSS v3.1 base score of ...

7.5CVSS5.9AI score0.00345EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/06/09 3:53 p.m.•14 views

CVE-2025-48261 WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Retrieve Embedded Sensitive Data.This issue affects MultiVendorX: from n/a through = 4.2.22...

7.5CVSS5.2AI score0.00345EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/09 3:53 p.m.•38 views

CVE-2025-48261 WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Retrieve Embedded Sensitive Data.This issue affects MultiVendorX: from n/a through = 4.2.22...

7.5CVSS0.00345EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/09 12:00 a.m.•20 views

PT-2025-24522 · Unknown · Multivendorx

Name of the Vulnerable Software and Affected Versions: MultiVendorX versions through 4.2.22 Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: For versions through 4.2.22, update to a version later...

7.5CVSS7.3AI score0.00345EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/06/09 12:00 a.m.•17 views

WordPress plugin MultiVendorX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.2AI score0.00345EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/09 12:00 a.m.•4 views

CVE-2025-48261: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Retrieve Embedded Sensitive Data.This issue affects MultiVendorX: from n/a through = 4.2.22...

7.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/06/04 11:07 a.m.•18 views

WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by LVT-tholv2k in WordPress Plugin MultiVendorX versions = 4.2.22...

7.5CVSS6.7AI score0.00345EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:39 a.m.•18 views

CVE-2025-24706

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Stored XSS.This issue affects MultiVendorX: from n/a through = 4.2.13...

6.5CVSS7.2AI score0.00368EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:05 a.m.•18 views

CVE-2024-30433

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MultiVendorX WC Marketplace allows Stored XSS.This issue affects WC Marketplace: from n/a through 4.1.3...

6.5CVSS8.6AI score0.0036EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:14 a.m.•13 views

CVE-2024-9531

The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mvxsentdeactivationrequest' function in all versions up to, and including, 4.2.4. This makes it possible f...

4.3CVSS5.2AI score0.00343EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:14 a.m.•24 views

CVE-2024-25929

Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.5...

9.1CVSS6.9AI score0.00319EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:50 a.m.•12 views

CVE-2023-37972

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MultiVendorX Product Stock Manager & Notifier for WooCommerce.This issue affects Product Stock Manager & Notifier for WooCommerce: from n/a through 2.0.1...

7.5CVSS7.7AI score0.00667EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:17 a.m.•13 views

CVE-2023-51355

Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through = 4.0.23...

8.2CVSS7.3AI score0.00525EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:44 a.m.•12 views

CVE-2023-37971

Missing Authorization vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Product Stock Alert: from n/a through 2.0.1...

6.5CVSS8AI score0.00599EPSS
SaveExploits0References1
Rows per page
Query Builder