VULNERABILITY INTELLIGENCE

CVE-2025-49916

CVSS score8.6 HIGH

EPSS probability0.33%

CISA KEVNot currently listed

Published2025-10-22

Last modified2026-10-19

Description

Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through <= 4.2.23.