Medium severity5.4NVD Advisory· Published Dec 9, 2024· Updated Jun 17, 2026

CVE-2023-50899

Description

Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Woocommerce Catalog Enquiryinferred
Range: <=5.0.2
Package: https://wordpress.org/plugins/woocommerce-catalog-enquiry
WordPress/Product Catalog Enquiry for WooCommercellm-create
Range: <=5.0.2
Multivendorx/Product Catalog Enquiry for WooCommercellm-fuzzy
Range: <=5.0.2

Patches

Vulnerability mechanics

References

patchstack.com/database/wordpress/plugin/woocommerce-catalog-enquiry/vulnerability/wordpress-product-catalog-enquiry-for-woocommerce-by-multivendorx-plugin-5-0-2-broken-access-control-vulnerabilitynvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000