CVE-2023-50899

Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.2.

Score

CVSS 3.1 5.4 Medium

Status

Deferred - audit@patchstack.com

Published

2024-12-09

Last modified

2026-04-28

Weaknesses

CWE-862

Affected products

• Product Catalog Enquiry For Woocommerce By Multivendorx (Multivendorx)

References

• https://patchstack.com/database/wordpress/plugin/woocommerce-catalog-enquiry/vulnerability/wordpress-product-catalog-en…