Lucene search

CVE-2024-9531 MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending

🗓️ 24 Oct 2024 07:55:35Reported by WordfenceType

MultiVendorX WooCommerce plugin <= 4.2.4 Missing Authorization for Vendor Profile Deletion Emai

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2024-9531 MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending	24 Oct 202407:35	–	cvelist
CVE	CVE-2024-9531	24 Oct 202408:15	–	cve
NVD	CVE-2024-9531	24 Oct 202408:15	–	nvd
Patchstack	WordPress WC Marketplace Plugin <= 4.2.4 is vulnerable to Broken Access Control	23 Oct 202400:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 21, 2024 to October 27, 2024)	31 Oct 202415:37	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/5af1063c-615e-4196-9fa6-960c008544c4
plugins	www.plugins.trac.wordpress.org/changeset/3173238/dc-woocommerce-multi-vendor/trunk/classes/class-mvx-ajax.php
plugins	www.plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/trunk/classes/class-mvx-ajax.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Oct 2024 07:35Current

6.6Medium risk

Vulners AI Score6.6

CVSS34.3

EPSS0.001

SSVC

CWE-285

cve-2024-9531 wordpress multivendorx woocommerce authorization data-modification email-vulnerability