MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions

77 Quality Score

Active Installs

15/30

With only 2,000 active installs, it sits well below the leading alternatives, suggesting limited traction and a smaller pool of real-world feedback.

Update Freshness

25/25

A recent update and compatibility with WordPress 7.0.1 indicate the developer is actively keeping the plugin current.

User Rating

14/15

A 96/100 rating from 432 reviewers is strong, though the modest number of ratings means the average may shift quickly with future reviews.

Support Health

8/15

Only one support thread exists, and while it was resolved, the very thin public support footprint makes it hard to judge response quality at scale.

WP Compatibility

15/15

Full marks for compatibility, with tested support up to WordPress 7.0.1 and a PHP 8.0 requirement that matches modern hosting environments.

Scores higher than 53% of indexed plugins

About

MultiVendorX: WordPress multivendor plugin to build your dream marketplace. Top-rated multi-vendor plugin to launch your WooCommerce marketplace.

Active Installs 2k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-08 2:08pm GMT

Requires WordPress 6.4.0+

Tested Up To 7.1.0

Requires PHP 8.0+

Security History

33 known vulnerabilities, all patched

2 Critical 7 High 24 Medium

Most recent: September 14, 2026

View details ▸

MultiVendorX <= 5.0.15 - Missing Authorization Medium

September 14, 2026 Patched in ["5.0.16"] CVE-2026-74926

MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 5.0.0 - 5.0.15 - Authenticated (Custom Role+) Privilege Escalation Medium

September 11, 2026 Patched in ["5.0.16"] CVE-2026-74925

MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 5.0.13 - 5.0.14 - Unauthenticated Information Exposure Medium

August 31, 2026 Patched in ["5.0.15"] CVE-2026-74927

MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.17 - Missing Authorization Medium

August 18, 2026 Patched in [] CVE-2026-66651

MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.10 - Missing Authorization Medium

August 7, 2026 Patched in ["5.0.11"] CVE-2026-66441

MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions < 5.0.11 - Missing Authorization Medium

August 5, 2026 Patched in ["5.0.11"] CVE-2026-16605

MultiVendorX <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Store Owner+) Cross-Store Commission Data Disclosure Medium

July 27, 2026 Patched in ["5.0.11"] CVE-2026-16746

MultiVendorX <= 5.0.9 - Authenticated (Store Owner+) SQL Injection via 'order_by' Parameter Medium

July 15, 2026 Patched in ["5.0.10"] CVE-2026-12941

MultiVendorX <= 4.2.23 - Missing Authorization Medium

June 12, 2025 Patched in ["4.2.24"] CVE-2025-49916

MultiVendorX <= 4.2.22 - Unauthenticated Information Exposure Medium

June 4, 2025 Patched in ["4.2.23"] CVE-2025-48261

MultiVendorX <= 4.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 19, 2025 Patched in ["4.2.23"] CVE-2025-48263

MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion Medium

May 16, 2025 Patched in ["4.2.23"] CVE-2025-4101

MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion Medium

April 4, 2025 Patched in ["4.2.20"] CVE-2025-2789

MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion Critical

January 30, 2025 Patched in ["4.2.15"] CVE-2025-0493

WC Marketplace <= 4.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

January 24, 2025 Patched in ["4.2.14"] CVE-2025-24706

MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending Medium

October 23, 2024 Patched in ["4.2.5"] CVE-2024-9531

MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Cross-Site Request Forgery to Vendor Updates Medium

October 23, 2024 Patched in ["4.2.5"] CVE-2024-9943

MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover Critical

September 3, 2024 Patched in ["4.2.1"] CVE-2024-8289

MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Arbitrary Vendor Deletion High

September 3, 2024 Patched in ["4.2.1"] CVE-2024-8289

WC Marketplace <= 4.1.17 - Reflected Cross-Site Scripting Medium

August 9, 2024 Patched in ["4.2.0"] CVE-2024-43213

MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter Medium

June 5, 2024 Patched in ["4.1.12"] CVE-2024-5259

WC Marketplace <= 4.1.3 - Missing Authorization Medium

April 5, 2024 Patched in ["4.1.4"] CVE-2024-31304

WC Marketplace <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

March 28, 2024 Patched in ["4.1.4"] CVE-2024-30433

MultiVendorX Marketplace <= 4.0.25 - Missing Authorization High

January 31, 2024 Patched in ["4.0.26"] CVE-2024-24703

WC Marketplace <= 4.0.23 - Missing Authorization via mvx_save_dashpages High

December 26, 2023 Patched in ["4.0.24"] CVE-2023-51355

MultiVendorX <= 4.0.25 - Improper Authorization on REST Routes via 'save_settings_permission' High

September 12, 2023 Patched in ["4.0.26"]

Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Reflected Cross-Site Scripting Medium

August 15, 2022 Patched in ["3.8.12"]

Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Local File Inclusion High

August 15, 2022 Patched in ["3.8.12"]

Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Multiple Unprotected AJAX Actions High

August 15, 2022 Patched in ["3.8.12"] CVE-2022-2657

Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Cross-Site Request Forgery High

August 4, 2022 Patched in ["3.8.12"] CVE-2022-2657

Multivendor Marketplace Solution for WooCommerce – WC Marketplace < 3.8.4 - Reflected Cross-Site Scripting Medium

December 6, 2021 Patched in ["3.8.4"]

Multivendor Marketplace Solution for WooCommerce <= 3.7.3 - Insecure Direct Object Reference Medium

May 26, 2021 Patched in ["3.7.4"]

MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass Medium

September 16, 2020 Patched in ["3.5.8"] CVE-2020-36741

What It Does

MultiVendorX turns a standard WooCommerce store into a full marketplace where multiple vendors can register, list products, manage their own inventory, and receive payouts. It provides vendor dashboards, commission controls, and shipping/tax configuration to coordinate sales between the marketplace owner and individual sellers.

Who It's For

This plugin fits small to mid-sized marketplace operators who want to launch a multi-seller storefront on WooCommerce and need a vendor onboarding flow, commission system, and product management tools out of the box. It is a good match for site owners who prefer a single integrated solution over assembling separate extensions.

Who Should Skip It

Anyone running a single-vendor store, or sites expecting the install base and third-party ecosystem of larger competitors, should skip it. It is also a poor fit for high-traffic enterprise marketplaces given the relatively low active install count and limited public support history.

The Bottom Line

MultiVendorX is a competently maintained plugin with excellent user ratings, but its small install base and thin public support history make it a harder sell than Dokan or WCFM Marketplace for most operators. It is worth a closer look if its feature set matches your roadmap and you are comfortable with a smaller ecosystem. Overall quality lands at 76.68/100, which is solid but not best-in-class.

Related Plugins

Dokan 88/100

Pick Dokan if you want the largest install base, a deep extension library, and a more mature community for troubleshooting.

WCFM Frontend Manager 80/100

Pick WCFM if vendor front-end dashboards and deep WooCommerce feature parity matter more than a polished out-of-the-box marketplace UI.

WCFM Marketplace 79/100

Pick WCFM Marketplace if you want the marketplace tier with built-in commission, shipping, and payment-split features backed by 10,000 installs.

WCFM Membership 77/100

Pick WCFM Membership if vendor subscription plans and membership tiers are central to your business model.

WC Vendors 77/100

Pick WC Vendors if you prefer a simpler, lighter-weight marketplace plugin with a comparable install footprint and a free core version.