Access violation vulnerability in MultiVendorX – WooCommerce Multivendor Marketplace Solutions 4.2.22

The MultiVendorX plugin for WordPress, which helps create online marketplaces, has a security issue that could lead to data being lost without permission. This is because the plugin did not have the proper checks in place for a function called ‘delete_fpm_product’. As a result, someone with access to the plugin and Contributor-level privileges or higher could delete any posts, pages, attachments, or products. The issue has been somewhat fixed in version 4.2.22.