Lucene search

WpvulndbWPVDB-ID:F617C8AB-F693-4E3A-818B-6554BA24468F

HistoryFeb 05, 2024 - 12:00 a.m.

MultiVendorX Marketplace < 4.0.26 - Missing Authorization

2024-02-0500:00:00

wpscan.com

multivendorx

marketplace

vulnerable

authorization

modification

data

capability check

unauthenticated attackers

function access

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin is vulnerable to unauthorized modification of data due to a missing capability check, allowing unauthenticated attackers to call a function that should be accessible to higher users only

CPENameOperatorVersion
eq4.0.26

CPE	Name	Operator	Version
		eq	4.0.26

References

patchstack.com/database/vulnerability/dc-woocommerce-multi-vendor/wordpress-multivendorx-plugin-4-1-1-broken-access-control-vulnerability