188 matches found
CVE-2026-12941
The MultiVendorX plugin for WordPress (WooCommerce Multivendor) ≤ 5.0.9 is vulnerable to a generic SQL Injection via the order_by parameter. Root cause: insufficient escaping of user input and lack of proper query preparation. Attack requires an authenticated user with subscriber-level access; vi...
CVE-2023-50899
Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.2...
WordPress MultiVendorX plugin <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion vulnerability
Incorrect Authorization to Authenticated Contributor+ Arbitrary Post Deletion vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin MultiVendorX versions = 4.2.22...
CVE-2025-49916
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through = 4.2.23...
EUVD-2025-35540
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through = 4.2.23...
CVE-2025-49916 WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through = 4.2.23...
CVE-2025-49916 WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through = 4.2.23...
CVE-2025-49916
The CVE-2025-49916 entry concerns WordPress/MultivendorX: dc-woocommerce-multi-vendor versions up to and including 4.2.23 suffer a Missing Authorization (Broken Access Control) vulnerability. The underlying issue is that certain functionality is not properly constrained by ACLs, enabling access t...
PT-2025-43182
Name of the Vulnerable Software and Affected Versions MultiVendorX versions through 4.2.23 Description A missing authorization issue exists in MultiVendorX dc-woocommerce-multi-vendor. The issue allows access to functionality that is not properly constrained by Access Control Lists ACLs...
EUVD-2023-56076
Malicious code in bioql PyPI...
EUVD-2025-17536
Malicious code in bioql PyPI...
EUVD-2025-9911
Malicious code in bioql PyPI...
EUVD-2023-55632
Malicious code in bioql PyPI...
EUVD-2025-28181
Malicious code in bioql PyPI...
EUVD-2024-40109
Malicious code in bioql PyPI...
EUVD-2025-3898
Malicious code in bioql PyPI...
EUVD-2024-22102
Malicious code in bioql PyPI...
EUVD-2023-41799
Malicious code in bioql PyPI...