Ad

CVE-2026-27542

CRITICAL CVSS 3.1: 9.8
Updated Mar 19, 2026
Rymera Web Co Pty Ltd.
Parameter Value
CVSS 9.8 (CRITICAL)
Type CWE-266 (Incorrect Privilege Assignment)
Vendor Rymera Web Co Pty Ltd.
Public PoC No

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through 2.0.3.1.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Vulnerable Products

rymera web co pty ltd.:woocommerce wholesale lead capture