Vulnerabilities

TI-2024-20266 CVE-2024-30542 · GHSA-mqf4-w45q-79ww

WordPress WholesaleX plugin <= 1.3.2 - Unauthenticated Privilege Escalation vulnerability

MEDIUM 50

Improper Privilege Management vulnerability in Wholesale WholesaleX allows Privilege Escalation.This issue affects WholesaleX: from n/a through 1.3.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00538 Published 2024-05-17 No fix listed CWE-269

TI-2024-19970 CVE-2024-30224 · GHSA-c7mc-vqjx-hc9c

WordPress WholesaleX plugin <= 1.3.2 - Unauthenticated PHP Object Injection vulnerability

MEDIUM 50

Deserialization of Untrusted Data vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.2.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00725 Published 2024-03-28 No fix listed CWE-502

TI-2024-19980 CVE-2024-30234 · GHSA-7x8p-3pr3-73hp

WordPress WholesaleX plugin <= 1.3.1 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00474 Published 2024-03-26 No fix listed CWE-862

TI-2024-19979 CVE-2024-30233 · GHSA-rjx9-ww7j-9fvr

WordPress WholesaleX plugin <= 1.3.1 - Sensitive Data Exposure on User Export vulnerability

LOW 29

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00529 Published 2024-03-26 No fix listed CWE-200

Vulnerabilities

Filters

WordPress WholesaleX plugin <= 1.3.2 - Unauthenticated Privilege Escalation vulnerability

WordPress WholesaleX plugin <= 1.3.2 - Unauthenticated PHP Object Injection vulnerability

WordPress WholesaleX plugin <= 1.3.1 - Broken Access Control vulnerability

WordPress WholesaleX plugin <= 1.3.1 - Sensitive Data Exposure on User Export vulnerability