https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:41:14.592464+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-284469 EUVD-2026-284469 2026-10-05T15:41:14.643333+00:00 EUVD-2026-284469 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4101 fkie_cve-2025-4101 2026-10-05T15:41:14.643370+00:00

The MultiVendorX – WooCommerce Multivendor Marketplace Solutions plugin for WordPress is vulnerable to unauthorized loss of data due to a misconfigured capability check on the 'delete_fpm_product' function in all versions up to, and including, 4.2.22. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary posts, pages, attachments, and products. The vulnerability was partially patched in version 4.2.22.

 https://cve.radiocsirt.org/vuln/ghsa-8743-487v-2xqh GHSA-8743-487v-2xqh 2026-10-05T15:41:14.643407+00:00

The MultiVendorX – WooCommerce Multivendor Marketplace Solutions plugin for WordPress is vulnerable to unauthorized loss of data due to a misconfigured capability check on the 'delete_fpm_product' function in all versions up to, and including, 4.2.22. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary posts, pages, attachments, and products. The vulnerability was partially patched in version 4.2.22.