PT-2026-93275 · WordPress · Multivendorx
CVSS v3.1
7.1
عالية
| المتجه | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
MultiVendorX WordPress plugin versions prior to 5.0.16
Description
An issue exists where the plugin fails to verify store ownership within a REST API route. This allows any authenticated user, including those with subscriber privileges, to overwrite store details, modify payout settings, and change the ownership records of any store.
Recommendations
Update the plugin to version 5.0.16 or later.
استغلال
إصلاح
Missing Authorization
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Multivendorx