Veille CVE

Août 2026

4 CVE

Critique 0 Élevée 2 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « MultiVendorX » ✕
  1. CVE-2026-66651 6.5 Moyenne

    MultiVendorX

    Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through 5.0.20.

  2. CVE-2026-66441 7.5 Élevée

    MultiVendorX

    Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions.

  3. CVE-2026-16746 2.7 Faible

    Unknown MultiVendorX

    The MultiVendorX WordPress plugin before 5.0.11 does not verify that the requested store belongs to the current user in one of its REST API endpoints, allowing any vendor-level user to read other vendors' commission and financial data.

  4. CVE-2026-16605 7.2 Élevée

    Unknown MultiVendorX

    The MultiVendorX WordPress plugin before 5.0.11 does not verify that the store targeted through its REST API belongs to the requesting vendor, allowing an authenticated vendor (Store Owner and above) to view, take over, permanently delete, or modify any other vendor's store on the marketplace.