Log out
Get PRO

Latest

Input validation vulnerability in MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution 4.1.17

  • Severity: medium-risk
  • Status: Fixed
  • Publication: August 9, 2024

The WC Marketplace plugin for WordPress has a security issue where malicious scripts can be injected into pages if an attacker is able to trick a user into clicking on a link. This can happen in versions up to 4.1.17 due to inadequate protection against harmful inputs.

Detected in:

MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy fixed vulnerable versions:
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution fixed vulnerable versions:
MultiVendorX – Transforming WooCommerce into Your Dream Marketplace fixed vulnerable versions:
MultiVendorX – WooCommerce Multivendor – WooCommerce Marketplace – Build Next Amazon, eBay, Etsy, Airbnb fixed vulnerable versions:
MultiVendorX – WooCommerce Multivendor Marketplace Solutions fixed vulnerable versions:
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.