CVE-2026-12941
MultiVendorX <= 5.0.9 - Authenticated (Store Owner+) SQL Injection via 'order_by' ParameterList of 281 websites affected by CVE-2026-12941
The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *******.**.il |  Israel | **,*** | |
| **********.com |  Malaysia | ***,*** | |
| *************.info |  GB | ***,*** | |
| *****************.**.uk |  United States | ***,*** | |
| **********.com | United States | *,***,*** | |
| ****************.com |  India | *,***,*** | |
| ************.com |  France | *,***,*** | |
| ***************.com | France | *,***,*** | |
| **********************.fr | France | *,***,*** | |
| ***********.com | United States | *,***,*** | |
| ******.com | United States | *,***,*** | |
| ****.net | United States | *,***,*** | |
| ************.com | United States | *,***,*** | |
| ***********.com |  Germany | *,***,*** | |
| *********.nl |  Netherlands | *,***,*** | |
| ******************.com | France | *,***,*** | |
| ********.net |  South Africa | *,***,*** | |
| ***********.com |  Cyprus | *,***,*** | |
| ******************.com | France | *,***,*** | |
| ********.com | United States | *,***,*** |