https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T22:43:55.298397+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-8145 CVE-2026-8145 — WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration' 2026-10-20T22:43:55.299442+00:00

Affected: wpxpo WholesaleX – All-in-One B2B Solution with Wholesale Pricing

The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and including, 3.0.8 via the 'process_registration' due to missing validation on the 'wholesalex_registration_role' parameter. This makes it possible for unauthenticated attackers to register as any existing WholesaleX role. The vulnerability was partially patched in version 2.3.8.