CVE-2025-4101 | MultiVendorX Plugin up to 4.2.22 on WordPress delete_fpm_product improper authentication

A vulnerability, which was classified as critical, was found in MultiVendorX Plugin up to 4.2.22 on WordPress. Affected is the function delete_fpm_product. The manipulation leads to improper authentication.

This vulnerability is traded as CVE-2025-4101. It is possible to launch the attack remotely. There is no exploit available.