woocommerce-wholesale-lead-capture vulnerabilities
CVEs whose affected-version data names the woocommerce-wholesale-lead-capture package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-27542Critical· 9.8PoCWordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Privilege Escalation. This issue affects Woocommerce Wholesale Lead Capture: through 2.0.3.1.
▾ AbyssalRymera Web Co Pty Ltd. · woocommerce-wholesale-lead-captureEPSS 1.7%via CVEORG
CVE-2026-27540Critical· 9.0PoCWordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Using Malicious Files. This issue affects Woocommerce Wholesale Lead Capture: through 2.0.3.1.
▾ AbyssalRymera Web Co Pty Ltd. · woocommerce-wholesale-lead-captureEPSS 2.7%via CVEORG