PT-2026-114909 · Wpxpo · Wholesalex – All-In-One B2B Solution With Wholesale Pricing
CVSS v3.1
5.4
متوسطة
| المتجه | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and including, 3.0.8 via the 'process registration' due to missing validation on the 'wholesalex registration role' parameter. This makes it possible for unauthenticated attackers to register as any existing WholesaleX role. The vulnerability was partially patched in version 2.3.8.
إصلاح
Improper Privilege Management
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Wholesalex – All-In-One B2B Solution With Wholesale Pricing