WordPress Plugin Vulnerabilities
CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce < 6.1.6 - Unauthenticated Privilege Escalation
Description
The CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.1.5. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for unauthenticated attackers to elevate their privileges beyond those intended for their role.
Affects Plugins
Fixed in 6.1.6 References
Classification
Type
PRIVESC
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Peng Zhou
Verified
No
WPVDB ID
Timeline
Publicly Published
2026-09-07 (about 1 month ago)
Added
2026-09-10 (about 1 month ago)
Last Updated
2026-10-13 (about 3 days ago)
