What’s Vulnerable › Products

MultiVendorX vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your MultiVendorX version is affected

Latest MultiVendorX vulnerabilities

• CVE-2026-74926 — MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST Endpoint (CVSS 7.1)
• CVE-2026-74925 — MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator (CVSS 7.2)
• CVE-2026-74927 — MultiVendorX 5.0.13 - 5.0.14 - Unauthenticated Vendor PII and Payout Data Disclosure via stores REST Endpoint (CVSS 5.3)
• CVE-2026-16746 — MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint (CVSS 2.7)
• CVE-2026-16605 — MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorization (CVSS 7.2)