{"id":"CVE-2026-27541","title":"WordPress Wholesale Suite plugin <= 2.2.6 - Privilege Escalation vulnerability","summary":"Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite allows Privilege Escalation.\n\nThis issue affects Wholesale Suite: through 2.2.6.","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-266"],"vendor":"Josh Kohlbach","product":"woocommerce-wholesale-prices","affected":["woocommerce-wholesale-prices <= 2.2.6"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-03-09T14:34:51.544393Z"},"exploitAvailable":true,"published":"2026-03-05","updated":"2026-11-05","sourceUpdated":"2026-11-05T11:07:01.599Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-27541","references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/woocommerce-wholesale-prices/vulnerability/wordpress-wholesale-suite-plugin-2-2-1-privilege-escalation-vulnerability?_s_id=cve"}],"tags":["cve.org","exploit-available"],"epss":0.0028,"epssPercentile":0.20555,"exploits":{"github":1,"githubRepos":["https://github.com/rootdirective-sec/CVE-2026-27541-Analysis-Lab"],"checkedAt":"2026-11-05T21:36:37.229Z"},"ingestedAt":"2026-11-05T21:36:00.801Z","slug":"CVE-2026-27541","body":"## Overview\n\nIncorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite allows Privilege Escalation.\n\nThis issue affects Wholesale Suite: through 2.2.6.\n\n## Affected\n\n- `woocommerce-wholesale-prices <= 2.2.6`\n\n## Remediation\n\nUpdate to 2.2.7 or a higher version.","depth":"midnight","depthScore":52,"depthScoreParts":{"impact":39.6,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}