dc-woocommerce-multi-vendor vulnerabilities

CVEs whose affected-version data names the dc-woocommerce-multi-vendor package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-114711Medium· 6.5

1w ago

WordPress MultiVendorX plugin <= 5.0.20 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions.

▾ SunlitMultiVendorX · dc-woocommerce-multi-vendorEPSS 0.24%via CVEORG

CVE-2026-66651Medium· 6.5

2mo ago

Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through 5.0.20.

Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through 5.0.20.

▾ SunlitMultiVendorX · dc-woocommerce-multi-vendorEPSS 0.27%via NVD