Access violation vulnerability in MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution 4.2.4

The MultiVendorX plugin for WordPress allows multiple vendors to sell products on a website. However, there is a security vulnerability in all versions up to 4.2.4 that could allow unauthorized changes to be made to data. This is because the plugin does not check for the proper permissions when using the ‘mvx_sent_deactivation_request’ function. As a result, someone with at least Subscriber-level access could potentially send a pre-written email to the site’s administrator, asking them to delete a vendor’s profile.