Log out
Get PRO

Latest

Input validation vulnerability in MultiVendorX – MultiVendor Marketplace Solution For WooCommerce 3.8.11.8

  • Severity: high-risk
  • Status: Fixed
  • Publication: August 4, 2022

The Multivendor Marketplace Solution for WooCommerce is a plugin for WordPress that had a security vulnerability in versions up to and including 3.8.11.8. This vulnerability was caused by a missing or incorrect nonce validation on the wcmp_suspend_vendor ajax action. This meant that unauthenticated attackers could potentially suspend vendors, by taking advantage of a logged in user clicking on a link that had been forged.

Detected in:

MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy fixed vulnerable versions:
MultiVendorX – MultiVendor Marketplace Solution For WooCommerce fixed vulnerable versions: >= * <= 3.8.11.8
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution fixed vulnerable versions:
MultiVendorX – Transforming WooCommerce into Your Dream Marketplace fixed vulnerable versions:
MultiVendorX – WooCommerce Multivendor – WooCommerce Marketplace – Build Next Amazon, eBay, Etsy, Airbnb fixed vulnerable versions:
MultiVendorX – WooCommerce Multivendor Marketplace Solutions fixed vulnerable versions:
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution fixed vulnerable versions:
MultiVendorX Marketplace – WooCommetrce MultiVendor Marketplace Solution fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.