Privilege Escalation Vulnerability in Woocommerce Wholesale Lead Capture by Rymera Web Co Pty Ltd
CVE-2026-27542

9.8CRITICAL

Key Information:

Vendor

WordPress
Status
WooCommerce Wholesale Lead Capture
Vendor
CVE Published:
19 March 2026

What is CVE-2026-27542?

A privilege escalation vulnerability exists in the Woocommerce Wholesale Lead Capture plugin developed by Rymera Web Co Pty Ltd. This flaw allows unauthorized users to gain elevated privileges, compromising the security of the application. The vulnerability affects all versions up to and including 2.0.3.1, enabling potential attackers to exploit this weakness for unauthorized access.

Affected Version(s)

Woocommerce Wholesale Lead Capture 0 <= 2.0.3.1

References

https://patchstack.com/database/Wordpress/Plugin/woocomme...
vdb-entry

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Teemu Saarentaus | Patchstack Bug Bounty Program
.