3.7.8

DATE	CVE	VULNERABILITY TITLE	RISK
2024-09-04	CVE-2024-8289	Missing Authorization vulnerability in Multivendorx The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to privilege escalation/de-escalation and account takeover due to an insufficient capability check on the update_item_permissions_check and create_item_permissions_check functions in all versions up to, and including, 4.2.0. network low complexity multivendorx CWE-862 critical	9.8
2024-06-09	CVE-2024-31304	Missing Authorization vulnerability in Multivendorx Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3. network low complexity multivendorx CWE-862	8.8
2024-06-06	CVE-2024-5259	Cross-site Scripting vulnerability in Multivendorx The MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hover_animation’ parameter in all versions up to, and including, 4.1.11 due to insufficient input sanitization and output escaping. network low complexity multivendorx CWE-79	5.4