{"id":"CVE-2026-27542","title":"WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability","summary":"Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Privilege Escalation.\n\nThis issue affects Woocommerce Wholesale Lead Capture: through 2.0.3.1.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-266"],"vendor":"Rymera Web Co Pty Ltd.","product":"woocommerce-wholesale-lead-capture","affected":["woocommerce-wholesale-lead-capture <= 2.0.3.1"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-03-19T14:11:25.413468Z"},"exploitAvailable":true,"published":"2026-03-19","updated":"2026-11-05","sourceUpdated":"2026-11-05T11:04:52.870Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-27542","references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/woocommerce-wholesale-lead-capture/vulnerability/wordpress-woocommerce-wholesale-lead-capture-plugin-1-17-8-privilege-escalation-vulnerability?_s_id=cve"}],"tags":["cve.org","exploit-available"],"epss":0.01737,"epssPercentile":0.7777,"exploits":{"github":1,"githubRepos":["https://github.com/Nxploited/CVE-2026-27542-CVE-2026-27540-"],"nuclei":["CVE-2026-27542"],"checkedAt":"2026-11-05T21:36:37.229Z"},"ingestedAt":"2026-11-05T21:36:00.801Z","slug":"CVE-2026-27542","body":"## Overview\n\nIncorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Privilege Escalation.\n\nThis issue affects Woocommerce Wholesale Lead Capture: through 2.0.3.1.\n\n## Affected\n\n- `woocommerce-wholesale-lead-capture <= 2.0.3.1`\n\n## Remediation\n\nUpdate to 2.0.3.2 or a higher version.","depth":"abyssal","depthScore":66,"depthScoreParts":{"impact":53.9,"likelihood":0.3,"exploitation":12,"ransomware":0},"changes":[]}