CVE-2026-119745 | MultiVendorX Plugin up to 2.11.2 Diagnostic Dump wp-admin/admin-post.php downloadDebugFile missing authentication

November 4, 2026 Yanac

A vulnerability classified as problematic has been found in MultiVendorX Plugin up to 2.11.2. Impacted is the function downloadDebugFile of the file wp-admin/admin-post.php of the component Diagnostic Dump. Performing a manipulation results in missing authentication.

This vulnerability was named CVE-2026-119745. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More