Broken Access Control in MultiVendorX plugin allows exploitation of authorization issues up to version 4.0.23.
Reporter | Title | Published | Views | Family All 6 |
---|---|---|---|---|
Cvelist | CVE-2023-51355 WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability | 9 Dec 202411:29 | – | cvelist |
NVD | CVE-2023-51355 | 9 Dec 202413:15 | – | nvd |
WPVulnDB | WC Marketplace < 4.0.24 - Missing Authorization via mvx_save_dashpages | 3 Jan 202400:00 | – | wpvulndb |
CVE | CVE-2023-51355 | 9 Dec 202413:15 | – | cve |
Patchstack | WordPress WC Marketplace Plugin <= 4.0.23 is vulnerable to Broken Access Control | 26 Dec 202300:00 | – | patchstack |
Wordfence Blog | Wordfence Intelligence Weekly WordPress Vulnerability Report (December 18, 2023 to December 31, 2023) | 5 Jan 202413:20 | – | wordfence |
[
{
"cpes": [
"cpe:2.3:a:multivendorx:wc_marketplace:*:*:*:*:*:*:*:*"
],
"vendor": "multivendorx",
"product": "wc_marketplace",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.0.23",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo