CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-8289

The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to privilege escalation/de-escalation and account takeover due to an insufficient capability check on the update_item_permissions_check and create_item_permissions_check functions in all versions up to, and including, 4.2.0. This makes it possible for unauthenticated attackers to change the password of any user with the vendor role, create new users with the vendor role, and demote other users like administrators to the vendor role.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.097

EPSS Ranking 92.5%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2024-8289

Multivendorx » Multivendorx » Version: N/A

cpe:2.3:a:multivendorx:multivendorx:-
Multivendorx » Multivendorx » Version: 3.0.7

cpe:2.3:a:multivendorx:multivendorx:3.0.7
Multivendorx » Multivendorx » Version: 3.1.7

cpe:2.3:a:multivendorx:multivendorx:3.1.7
Multivendorx » Multivendorx » Version: 3.2.2

cpe:2.3:a:multivendorx:multivendorx:3.2.2
Multivendorx » Multivendorx » Version: 3.3.0

cpe:2.3:a:multivendorx:multivendorx:3.3.0
Multivendorx » Multivendorx » Version: 3.3.7

cpe:2.3:a:multivendorx:multivendorx:3.3.7
Multivendorx » Multivendorx » Version: 3.4.0

cpe:2.3:a:multivendorx:multivendorx:3.4.0
Multivendorx » Multivendorx » Version: 3.4.1

cpe:2.3:a:multivendorx:multivendorx:3.4.1
Multivendorx » Multivendorx » Version: 3.4.10

cpe:2.3:a:multivendorx:multivendorx:3.4.10
Multivendorx » Multivendorx » Version: 3.4.11

cpe:2.3:a:multivendorx:multivendorx:3.4.11
Multivendorx » Multivendorx » Version: 3.4.2

cpe:2.3:a:multivendorx:multivendorx:3.4.2
Multivendorx » Multivendorx » Version: 3.4.3

cpe:2.3:a:multivendorx:multivendorx:3.4.3
Multivendorx » Multivendorx » Version: 3.4.4

cpe:2.3:a:multivendorx:multivendorx:3.4.4
Multivendorx » Multivendorx » Version: 3.4.5

cpe:2.3:a:multivendorx:multivendorx:3.4.5
Multivendorx » Multivendorx » Version: 3.4.6

cpe:2.3:a:multivendorx:multivendorx:3.4.6
Multivendorx » Multivendorx » Version: 3.4.7

cpe:2.3:a:multivendorx:multivendorx:3.4.7
Multivendorx » Multivendorx » Version: 3.4.8

cpe:2.3:a:multivendorx:multivendorx:3.4.8
Multivendorx » Multivendorx » Version: 3.4.9

cpe:2.3:a:multivendorx:multivendorx:3.4.9
Multivendorx » Multivendorx » Version: 3.5.0

cpe:2.3:a:multivendorx:multivendorx:3.5.0
Multivendorx » Multivendorx » Version: 3.5.1

cpe:2.3:a:multivendorx:multivendorx:3.5.1
Multivendorx » Multivendorx » Version: 3.5.10

cpe:2.3:a:multivendorx:multivendorx:3.5.10
Multivendorx » Multivendorx » Version: 3.5.11

cpe:2.3:a:multivendorx:multivendorx:3.5.11
Multivendorx » Multivendorx » Version: 3.5.12

cpe:2.3:a:multivendorx:multivendorx:3.5.12
Multivendorx » Multivendorx » Version: 3.5.13

cpe:2.3:a:multivendorx:multivendorx:3.5.13
Multivendorx » Multivendorx » Version: 3.5.14

cpe:2.3:a:multivendorx:multivendorx:3.5.14
Multivendorx » Multivendorx » Version: 3.5.15

cpe:2.3:a:multivendorx:multivendorx:3.5.15
Multivendorx » Multivendorx » Version: 3.5.16

cpe:2.3:a:multivendorx:multivendorx:3.5.16
Multivendorx » Multivendorx » Version: 3.5.17

cpe:2.3:a:multivendorx:multivendorx:3.5.17
Multivendorx » Multivendorx » Version: 3.5.18

cpe:2.3:a:multivendorx:multivendorx:3.5.18
Multivendorx » Multivendorx » Version: 3.5.2

cpe:2.3:a:multivendorx:multivendorx:3.5.2
Multivendorx » Multivendorx » Version: 3.5.3

cpe:2.3:a:multivendorx:multivendorx:3.5.3
Multivendorx » Multivendorx » Version: 3.5.4

cpe:2.3:a:multivendorx:multivendorx:3.5.4
Multivendorx » Multivendorx » Version: 3.5.5

cpe:2.3:a:multivendorx:multivendorx:3.5.5
Multivendorx » Multivendorx » Version: 3.5.6

cpe:2.3:a:multivendorx:multivendorx:3.5.6
Multivendorx » Multivendorx » Version: 3.5.7

cpe:2.3:a:multivendorx:multivendorx:3.5.7
Multivendorx » Multivendorx » Version: 3.5.8

cpe:2.3:a:multivendorx:multivendorx:3.5.8
Multivendorx » Multivendorx » Version: 3.5.9

cpe:2.3:a:multivendorx:multivendorx:3.5.9
Multivendorx » Multivendorx » Version: 3.6.0

cpe:2.3:a:multivendorx:multivendorx:3.6.0
Multivendorx » Multivendorx » Version: 3.7.0

cpe:2.3:a:multivendorx:multivendorx:3.7.0
Multivendorx » Multivendorx » Version: 3.7.1

cpe:2.3:a:multivendorx:multivendorx:3.7.1
Multivendorx » Multivendorx » Version: 3.7.2

cpe:2.3:a:multivendorx:multivendorx:3.7.2
Multivendorx » Multivendorx » Version: 3.7.3

cpe:2.3:a:multivendorx:multivendorx:3.7.3
Multivendorx » Multivendorx » Version: 3.7.4

cpe:2.3:a:multivendorx:multivendorx:3.7.4
Multivendorx » Multivendorx » Version: 3.7.5

cpe:2.3:a:multivendorx:multivendorx:3.7.5
Multivendorx » Multivendorx » Version: 3.7.6

cpe:2.3:a:multivendorx:multivendorx:3.7.6
Multivendorx » Multivendorx » Version: 3.7.7

cpe:2.3:a:multivendorx:multivendorx:3.7.7
Multivendorx » Multivendorx » Version: 3.7.8

cpe:2.3:a:multivendorx:multivendorx:3.7.8
Multivendorx » Multivendorx » Version: 3.8.0

cpe:2.3:a:multivendorx:multivendorx:3.8.0
Multivendorx » Multivendorx » Version: 3.8.1

cpe:2.3:a:multivendorx:multivendorx:3.8.1
Multivendorx » Multivendorx » Version: 3.8.10

cpe:2.3:a:multivendorx:multivendorx:3.8.10
Multivendorx » Multivendorx » Version: 3.8.11

cpe:2.3:a:multivendorx:multivendorx:3.8.11
Multivendorx » Multivendorx » Version: 3.8.11.1

cpe:2.3:a:multivendorx:multivendorx:3.8.11.1
Multivendorx » Multivendorx » Version: 3.8.11.4

cpe:2.3:a:multivendorx:multivendorx:3.8.11.4
Multivendorx » Multivendorx » Version: 3.8.11.5

cpe:2.3:a:multivendorx:multivendorx:3.8.11.5
Multivendorx » Multivendorx » Version: 3.8.11.6

cpe:2.3:a:multivendorx:multivendorx:3.8.11.6
Multivendorx » Multivendorx » Version: 3.8.11.7

cpe:2.3:a:multivendorx:multivendorx:3.8.11.7
Multivendorx » Multivendorx » Version: 3.8.11.8

cpe:2.3:a:multivendorx:multivendorx:3.8.11.8
Multivendorx » Multivendorx » Version: 3.8.12

cpe:2.3:a:multivendorx:multivendorx:3.8.12
Multivendorx » Multivendorx » Version: 3.8.2

cpe:2.3:a:multivendorx:multivendorx:3.8.2
Multivendorx » Multivendorx » Version: 3.8.3

cpe:2.3:a:multivendorx:multivendorx:3.8.3
Multivendorx » Multivendorx » Version: 3.8.4

cpe:2.3:a:multivendorx:multivendorx:3.8.4
Multivendorx » Multivendorx » Version: 3.8.5

cpe:2.3:a:multivendorx:multivendorx:3.8.5
Multivendorx » Multivendorx » Version: 3.8.6

cpe:2.3:a:multivendorx:multivendorx:3.8.6
Multivendorx » Multivendorx » Version: 3.8.7

cpe:2.3:a:multivendorx:multivendorx:3.8.7
Multivendorx » Multivendorx » Version: 3.8.8

cpe:2.3:a:multivendorx:multivendorx:3.8.8
Multivendorx » Multivendorx » Version: 3.8.9

cpe:2.3:a:multivendorx:multivendorx:3.8.9
Multivendorx » Multivendorx » Version: 3.9.0

cpe:2.3:a:multivendorx:multivendorx:3.9.0
Multivendorx » Multivendorx » Version: 3.9.1

cpe:2.3:a:multivendorx:multivendorx:3.9.1
Multivendorx » Multivendorx » Version: 3.9.2

cpe:2.3:a:multivendorx:multivendorx:3.9.2
Multivendorx » Multivendorx » Version: 3.9.3

cpe:2.3:a:multivendorx:multivendorx:3.9.3
Multivendorx » Multivendorx » Version: 4.0.0

cpe:2.3:a:multivendorx:multivendorx:4.0.0
Multivendorx » Multivendorx » Version: 4.0.10

cpe:2.3:a:multivendorx:multivendorx:4.0.10
Multivendorx » Multivendorx » Version: 4.0.12

cpe:2.3:a:multivendorx:multivendorx:4.0.12
Multivendorx » Multivendorx » Version: 4.0.13

cpe:2.3:a:multivendorx:multivendorx:4.0.13
Multivendorx » Multivendorx » Version: 4.0.14

cpe:2.3:a:multivendorx:multivendorx:4.0.14
Multivendorx » Multivendorx » Version: 4.0.15

cpe:2.3:a:multivendorx:multivendorx:4.0.15
Multivendorx » Multivendorx » Version: 4.0.16

cpe:2.3:a:multivendorx:multivendorx:4.0.16
Multivendorx » Multivendorx » Version: 4.0.17

cpe:2.3:a:multivendorx:multivendorx:4.0.17
Multivendorx » Multivendorx » Version: 4.0.18

cpe:2.3:a:multivendorx:multivendorx:4.0.18
Multivendorx » Multivendorx » Version: 4.0.19

cpe:2.3:a:multivendorx:multivendorx:4.0.19
Multivendorx » Multivendorx » Version: 4.0.20

cpe:2.3:a:multivendorx:multivendorx:4.0.20
Multivendorx » Multivendorx » Version: 4.0.21

cpe:2.3:a:multivendorx:multivendorx:4.0.21
Multivendorx » Multivendorx » Version: 4.0.22

cpe:2.3:a:multivendorx:multivendorx:4.0.22
Multivendorx » Multivendorx » Version: 4.0.23

cpe:2.3:a:multivendorx:multivendorx:4.0.23
Multivendorx » Multivendorx » Version: 4.0.24

cpe:2.3:a:multivendorx:multivendorx:4.0.24
Multivendorx » Multivendorx » Version: 4.0.25

cpe:2.3:a:multivendorx:multivendorx:4.0.25
Multivendorx » Multivendorx » Version: 4.0.26

cpe:2.3:a:multivendorx:multivendorx:4.0.26
Multivendorx » Multivendorx » Version: 4.0.27

cpe:2.3:a:multivendorx:multivendorx:4.0.27
Multivendorx » Multivendorx » Version: 4.0.28

cpe:2.3:a:multivendorx:multivendorx:4.0.28
Multivendorx » Multivendorx » Version: 4.0.29

cpe:2.3:a:multivendorx:multivendorx:4.0.29
Multivendorx » Multivendorx » Version: 4.0.30

cpe:2.3:a:multivendorx:multivendorx:4.0.30
Multivendorx » Multivendorx » Version: 4.0.31

cpe:2.3:a:multivendorx:multivendorx:4.0.31
Multivendorx » Multivendorx » Version: 4.0.32

cpe:2.3:a:multivendorx:multivendorx:4.0.32
Multivendorx » Multivendorx » Version: 4.0.5

cpe:2.3:a:multivendorx:multivendorx:4.0.5
Multivendorx » Multivendorx » Version: 4.1.0

cpe:2.3:a:multivendorx:multivendorx:4.1.0
Multivendorx » Multivendorx » Version: 4.1.1

cpe:2.3:a:multivendorx:multivendorx:4.1.1
Multivendorx » Multivendorx » Version: 4.1.10

cpe:2.3:a:multivendorx:multivendorx:4.1.10
Multivendorx » Multivendorx » Version: 4.1.11

cpe:2.3:a:multivendorx:multivendorx:4.1.11
Multivendorx » Multivendorx » Version: 4.1.12

cpe:2.3:a:multivendorx:multivendorx:4.1.12
Multivendorx » Multivendorx » Version: 4.1.2

cpe:2.3:a:multivendorx:multivendorx:4.1.2
Multivendorx » Multivendorx » Version: 4.1.3

cpe:2.3:a:multivendorx:multivendorx:4.1.3
Multivendorx » Multivendorx » Version: 4.1.4

cpe:2.3:a:multivendorx:multivendorx:4.1.4
Multivendorx » Multivendorx » Version: 4.1.5

cpe:2.3:a:multivendorx:multivendorx:4.1.5
Multivendorx » Multivendorx » Version: 4.1.6

cpe:2.3:a:multivendorx:multivendorx:4.1.6
Multivendorx » Multivendorx » Version: 4.1.7

cpe:2.3:a:multivendorx:multivendorx:4.1.7
Multivendorx » Multivendorx » Version: 4.1.8

cpe:2.3:a:multivendorx:multivendorx:4.1.8
Multivendorx » Multivendorx » Version: 4.1.9

cpe:2.3:a:multivendorx:multivendorx:4.1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-8289

Products

Pricing

Contact Us