WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6.

Affected Products

Vendor	Product	Versions
multivendorx	woocommerce product stock alert	n/a

References

https://patchstack.com/database/wordpress/plugin/woocommerce-product-stock-alert/vulnerability/wordpress-woocommerce-product-stock-alert-plugin-3-0-6-sensitive-data-exposure-vulnerability?_s_id=cve(vdb-entry)

Related News (1 articles)

Tier C

VulDB21d ago

CVE-2026-61945 | MultiVendorX Product Stock Alert Plugin up to 3.0.6 on WordPress information disclosure

→ No new info (linked only)

CVSS 3.16.5 MEDIUM

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA KEV❌ No

Actively exploited❌ No

CWECWE-497

PublishedJul 23, 2026

Trending Score2

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (1)

HIGHCVE-2026-66441EXPKEV

WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability

Trending: 106

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Jul 23, 2026

Discovered by ZDM

Jul 23, 2026