SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-81792

MEDIUM · CVSS 6.5 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

An unauthenticated privilege escalation vulnerability exists in the Product Catalog Enquiry feature of MultiVendorX for WooCommerce versions up to 6.1.4, allowing attackers to gain elevated privileges without authentication. This could lead to unauthorized access to sensitive data or administrative functions within the WooCommerce environment. E-commerce operators using affected versions should prioritize patching this vulnerability to mitigate potential exploitation risks.

CVE
CVE-2026-81792
Severity
MEDIUM
CVSS
6.5
EPSS
0.20%

Original NVD Description

Unauthenticated Privilege Escalation in Product Catalog Enquiry for WooCommerce by MultiVendorX <= 6.1.4 versions.