Sensitive Data Exposure in MultiVendorX WooCommerce Product Stock Alert
CVE-2026-61945

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
WooCommerce Product Stock Alert
Vendor
CVE Published:
23 July 2026

What is CVE-2026-61945?

The MultiVendorX WooCommerce Product Stock Alert plugin is susceptible to vulnerabilities that allow unauthorized users to retrieve embedded sensitive data. This exposure of sensitive system information can lead to significant risks for users, especially regarding data protection and overall security. Affected versions include 3.0.6 and earlier, highlighting the importance of timely updates to ensure user data remains secure.

Affected Version(s)

WooCommerce Product Stock Alert <= 3.0.6

References

https://patchstack.com/database/wordpress/plugin/woocomme...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jakub Herman | Patchstack Bug Bounty Program
.