← WordPress Vulnerabilities
WordPress security by component

Wholesale Suite

Wholesale Suite is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Mar 05, 2026; the highest CVE/CNA score is 7.2.

Plugin slug: woocommerce-wholesale-prices

CVE-2026-27541: Wholesale Suite: Privilege escalation or authentication bypass

Wholesale Suite is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.

PublishedMar 05, 2026
Safe version guidanceSee mitigation notes
Safe version
Mar 05, 2026 CVE-2026-27541
Wholesale Suite: Privilege escalation or authentication bypass
Wholesale Suite is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE7.2
NVDPending
Oct 22, 2025 CVE-2025-49924
Wholesale Suite: Privilege escalation or authentication bypass
Wholesale Suite is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE7.2
NVDPending
Nov 01, 2024 CVE-2024-38745
Wholesale Suite: A security weakness
Wholesale Suite is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Jan 08, 2024 CVE-2022-34344
Wholesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles, Dynamic Pricing & More: A security weakness
Wholesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles, Dynamic Pricing & More is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVD8.8
May 09, 2023 CVE-2022-41640
Woocommerce Wholesale Prices: Cross-site scripting
Woocommerce Wholesale Prices is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVD5.4