Vulnerabilities / WholesaleX
WholesaleX vulnerabilities
Advisories WPSec published for WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing). Other sources may list more. Its attack surface: WholesaleX on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-23 | WPSEC-2026-1484 | WholesaleX <= 3.1.4 - Unauthenticated Missing Authorization to Multisite Site Membership via Login Form | Low 3.7 | 3.1.5 |
| 2026-10-23 | WPSEC-2026-1483 | WholesaleX <= 3.1.4 - Authenticated (Administrator+) Privilege Escalation via Customer CSV Import on Multisite | Medium 6.6 | 3.1.5 |
License: CC BY 4.0