CVE-2026-108695 | MultiVendorX Plugin up to 5.0.19 on WordPress Settings REST Endpoint settings improper authorization

October 11, 2026 Yanac

A vulnerability labeled as problematic has been found in MultiVendorX Plugin up to 5.0.19 on WordPress. This affects an unknown function of the file /wp-json/multivendorx/v1/settings of the component Settings REST Endpoint. Such manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-108695. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More