GCVE - cpe:2.3:a:multivendorx:wc_marketplace:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:multivendorx:wc_marketplace:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Multivendorx (`70b693de-bbfc-5178-8e3c-d1a01af683f0`)
Product	Wc Marketplace (`3eaf58f4-a14d-59a1-a30d-f08498fcc62e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-43213`	vulnerable	2026-06-08 06:45:49.875072	WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability HIGH (7.1) Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MultiVendorX WC Marketplace allows Reflected XSS.This issue affects WC Marketplace: from n/a through 4.1.17. Published: 2024-08-12T21:40:49.126Z Updated: 2026-04-28T16:10:09.705Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/dc-woocommerce-multi-vendor/wordpress-multivendorx-marketplace-plugin-4-1-17-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31304`	vulnerable	2026-06-08 06:35:31.267416	WordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerability HIGH (7.1) Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3. Published: 2024-06-09T18:09:28.264Z Updated: 2026-04-28T16:09:30.636Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/dc-woocommerce-multi-vendor/wordpress-multivendorx-marketplace-4-1-3-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-30433`	vulnerable	2026-06-08 06:35:30.345268	WordPress MultiVendorX Marketplace plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MultiVendorX WC Marketplace allows Stored XSS.This issue affects WC Marketplace: from n/a through 4.1.3. Published: 2024-03-29T17:29:27.697Z Updated: 2026-04-28T16:09:23.441Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/dc-woocommerce-multi-vendor/wordpress-multivendorx-marketplace-plugin-4-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-24703`	vulnerable	2026-06-08 06:29:41.572150	WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability HIGH (8.6) Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25. Published: 2024-06-11T14:54:05.823Z Updated: 2026-04-28T16:09:10.177Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/dc-woocommerce-multi-vendor/wordpress-multivendorx-plugin-4-1-1-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-51355`	vulnerable	2026-06-08 06:16:17.353742	WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability HIGH (8.2) Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through <= 4.0.23. Published: 2024-12-09T11:29:50.201Z Updated: 2026-04-29T09:51:52.497Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/dc-woocommerce-multi-vendor/vulnerability/wordpress-multivendorx-plugin-4-0-23-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.