EUVD-2026-53106

The MultiVendorX WordPress plugin before 5.0.11 does not verify that the store targeted through its REST API belongs to the requesting vendor, allowing an authenticated vendor Store Owner and above to view, take over, permanently delete, or modify any other vendor's store on the marketplace...

Citrix Storefront: Stale store entry seen on workspace app

Situation: Customer who had initially two stores created on their storefront console, created a third store and then the third store was deleted. However, when they connect to their Workspace app, it still prompts to choose between the three stores. The third store entry is not present on any of...