MultiVendorX WC Marketplace Vulnerable to Missing Authorization

CVE-2024-24703

Summary

A vulnerability has been identified in the MultiVendorX WC Marketplace plugin that allows for missing authorization. This flaw enables an attacker to exploit weaknesses in user access control, potentially allowing unauthorized actions on user accounts. Affected versions range from the initial release to 4.0.25, highlighting a significant security concern for users relying on this plugin for managing multi-vendor functionalities in their e-commerce environments.

References