CVE-2026-66651 WordPress MultiVendorX plugin <= 5.0.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through 5.0.19...

CVE-2026-66651

Unauthenticated Broken Access Control in MultiVendorX = 5.0.14 versions...

WordPress MultiVendorX plugin <= 5.0.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jakub Herman in WordPress Plugin MultiVendorX versions = 5.0.14...

CVE-2026-66651: Missing Authorization

Unauthenticated Broken Access Control in MultiVendorX = 5.0.14 versions...

PT-2026-77074

Unauthenticated Broken Access Control in MultiVendorX = 5.0.14 versions...

CVE-2026-66441

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

EUVD-2026-57867

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

CVE-2026-66441

CVE-2026-66441 affects WordPress MultiVendorX plugin versions up to 5.0.10, with unauthenticated broken access control. The available sources identify the affected product and the vulnerability class but do not provide a confirmed patch version or remediation steps. CVSS v3.1 base score 7.5 (HIGH...

CVE-2026-66441 WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

CVE-2026-66441 WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

CVE-2026-66441

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

CVE-2026-66441: Missing Authorization

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

PT-2026-71554

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Uma Mo in WordPress Plugin MultiVendorX versions = 5.0.10...

CVE-2026-16746

The MultiVendorX WordPress plugin (versions before 5.0.11 ) contains an authorization bypass vulnerability in one of its REST API endpoints . The root cause is a failure to verify that a requested store belongs to the current user. This allows any user with vendor-level privileges to access and r...

CVE-2026-16746 MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint

The MultiVendorX WordPress plugin before 5.0.11 does not verify that the requested store belongs to the current user in one of its REST API endpoints, allowing any vendor-level user to read other vendors' commission and financial data...

WordPress MultiVendorX plugin < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion vulnerability

Store Owner+ Cross-Vendor Store Takeover and Deletion vulnerability discovered by Pedro Pinho in WordPress Plugin MultiVendorX versions 5.0.11...

CVE-2026-16605 MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorization

The MultiVendorX WordPress plugin before 5.0.11 does not verify that the store targeted through its REST API belongs to the requesting vendor, allowing an authenticated vendor Store Owner and above to view, take over, permanently delete, or modify any other vendor's store on the marketplace...

CVE-2026-16605 MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorization

The MultiVendorX WordPress plugin before 5.0.11 does not verify that the store targeted through its REST API belongs to the requesting vendor, allowing an authenticated vendor Store Owner and above to view, take over, permanently delete, or modify any other vendor's store on the marketplace...

EUVD-2026-53106

The MultiVendorX WordPress plugin before 5.0.11 does not verify that the store targeted through its REST API belongs to the requesting vendor, allowing an authenticated vendor Store Owner and above to view, take over, permanently delete, or modify any other vendor's store on the marketplace...