Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Wholesale for WooCommerce Privilege Escalation via 'user_role_set' Parameter (CVE-2026-12144)

www.wordfence.com 2026-07-29 查看中文 →
Security Advisory CVE-2026-12144 High Automattic
Affected:
  • Wholesale for WooCommerce <= 2.0.5
Fixed in:
  • 2.0.6
Referenced CVEs: CVE-2026-12144 · 8.8
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
WordPress 2015 Membership v2.2.0 Unauthenticated Privilege Escalation 2026-10-03 JMAAppointment v2.0.13 Unauthenticated Stored XSS via Redirect/Title Parameter 2026-10-03 W3 Total Cache <= 2.1.8 Unvalidated XSS Vulnerability Advisory 2026-10-03 All in One SEO v8.0.2 Reflected DOM Based XSS Vulnerability Advisory and POC 2026-10-03 WordPress Gutenberg Blocks Plugin Remote Code Execution (RCE) Vulnerability Analysis and PoC 2026-10-02
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro