Veille CVE

Recherche « Unknown WholesaleX »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown WholesaleX » ✕
  1. CVE-2026-111956 5.9 Moyenne

    Unknown WholesaleX

    The WholesaleX WordPress plugin before 3.0.9 does not protect or remove the user-import file it keeps in a publicly accessible location under a predictable name, allowing unauthenticated users to download the most recently imported user data, including any account passwords and customer contact and address details it contains.

  2. CVE-2026-111955 6.5 Moyenne

    Unknown WholesaleX

    The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation code is set before comparing it with the one supplied in a request, allowing unauthenticated users to activate pending accounts and bypass the administrator approval required before login.