188 matches found
CVE-2026-12941
The MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2023-50899
Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.2...
WordPress MultiVendorX plugin <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion vulnerability
Incorrect Authorization to Authenticated Contributor+ Arbitrary Post Deletion vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin MultiVendorX versions = 4.2.22...
CVE-2025-49916
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through = 4.2.23...
EUVD-2025-35540
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through = 4.2.23...
CVE-2025-49916 WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through = 4.2.23...
CVE-2025-49916 WordPress MultiVendorX plugin <= 4.2.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through = 4.2.23...
CVE-2025-49916
The CVE-2025-49916 entry concerns WordPress/MultivendorX: dc-woocommerce-multi-vendor versions up to and including 4.2.23 suffer a Missing Authorization (Broken Access Control) vulnerability. The underlying issue is that certain functionality is not properly constrained by ACLs, enabling access t...
PT-2025-43182
Name of the Vulnerable Software and Affected Versions MultiVendorX versions through 4.2.23 Description A missing authorization issue exists in MultiVendorX dc-woocommerce-multi-vendor. The issue allows access to functionality that is not properly constrained by Access Control Lists ACLs...
EUVD-2023-56076
Malicious code in bioql PyPI...
EUVD-2025-17536
Malicious code in bioql PyPI...
EUVD-2025-28181
Malicious code in bioql PyPI...
EUVD-2023-55632
Malicious code in bioql PyPI...
EUVD-2025-9911
Malicious code in bioql PyPI...
EUVD-2024-22102
Malicious code in bioql PyPI...
EUVD-2024-40109
Malicious code in bioql PyPI...
EUVD-2024-50228
Malicious code in bioql PyPI...
EUVD-2024-23231
Malicious code in bioql PyPI...