PT-2024-39681 · WordPress · Multivendorx

Tieu Pham Trong Nhan · Published 2024-10-24 · Updated 2024-10-25 · CVE-2024-9531

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress versions up to, and including, 4.2.4

Description The issue allows authenticated attackers with Subscriber-level access and above to send a canned email to the site's administrator, requesting the deletion of an arbitrary vendor's profile. This is due to a missing capability check on the mvx sent deactivation request function.

Recommendations For versions up to, and including, 4.2.4, update to a version that includes a fix for the missing capability check on the mvx sent deactivation request function. As a temporary workaround, consider restricting access to the mvx sent deactivation request function to prevent unauthorized modification of data.

Fix

Improper Authorization

Missing Authorization

Weakness Enumeration

CWE-285

CWE-862

Related Identifiers

CVE-2024-9531

Affected Products

Multivendorx

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-9531 · Security Note
• https://osv.dev/vulnerability/CVE-2024-9531 · Vendor Advisory
• https://t.me/cvedetector/8780 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/5af1063c-615e-4196-9fa6-960c008544c4?source=cve · Note
• https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/trunk/classes/class-mvx-ajax.php#L3780 · Note
• https://t.me/cvenotify/99309 · Telegram Post
• https://plugins.trac.wordpress.org/changeset/3173238/dc-woocommerce-multi-vendor/trunk/classes/class-mvx-ajax.php?contextall=1&old=3168957&old_path=%2Fdc-woocommerce-multi-vendor%2Ftrunk%2Fclasses%2Fclass-mvx-ajax.php · Note