CVE-2026-81792: WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.5 - Privilege Escalation vulnerability
Published Sep 8, 2026
·Updated
Incorrect Privilege Assignment vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX woocommerce-catalog-enquiry allows Privilege Escalation.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 6.1.5.
Affected Software
1 affected component
MultiVendorX Product Catalog Enquiry for WooCommerce<=6.1.5
Event History
Sep 8, 2026
CVE Published
via MITRE·07:15 AM
Data Sourced
via MITRE·07:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The issue is described as unauthenticated, so an attacker does not need a WordPress account or existing privileges to exploit it.
2
Which installations are affected?
Product Catalog Enquiry for WooCommerce by MultiVendorX versions 6.1.4 and earlier are affected.
3
What security impact is reported?
The reported impact is privilege escalation, with low integrity and availability impact in the supplied severity vector. No confidentiality impact is indicated.