Plugin icon

WholesaleX – All-in-One B2B Solution with Wholesale Pricing

wholesalex
Plugin closed

Vulnerabilities:

5

Last Updated:

October 6, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-10-14
Title
WholesaleX < 3.0.9 - Unauthenticated Limited Privilege Escalation via 'process_registration'
Fixed in
Fixed in 3.0.9
CVSS
6.5 (medium)
Published
2024-03-29
Title
WholesaleX < 1.3.3 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 1.3.3
CVSS
6.5 (medium)
Published
2024-03-26
Title
WholesaleX < 1.3.2 - Sensitive Information Exposure via export_users
Fixed in
Fixed in 1.3.2
CVSS
4.3 (medium)
Published
2024-03-26
Title
WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) < 1.3.3 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 1.3.3
CVSS
9.8 (critical)
Published
2024-03-26
Title
WholesaleX < 1.3.2 - Authenticated(Subscriber+) Missing Authorization via multiple AJAX actions
Fixed in
Fixed in 1.3.2
CVSS
4.3 (medium)