Tag

Cve-2026-108695

1 brief RSS

MultiVendorX Incorrect Authorization Vulnerability

The MultiVendorX WordPress plugin through version 5.0.19 contains an authorization bypass vulnerability allowing authenticated store owners to modify global marketplace settings via the REST API.

MultiVendorX wordpress plugin authorization-bypass cve-2026-108695

1r 1t 1c 6m ago