CVE-2026-8145

The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and including, 3.0.8 via the 'process_registration' due to missing validation on the 'wholesalex_registration_role' parameter. This makes it possible for unauthenticated attackers to register as any existing WholesaleX role. The vulnerability was partially patched in version 2.3.8.

• CWE-269

• https://plugins.trac.wordpress.org/browser/wholesalex/tags/2.3.7/includes/menu/class-wholesalex-registration.php#L1327
• https://plugins.trac.wordpress.org/browser/wholesalex/trunk/includes/menu/class-wholesalex-registration.php#L1327
• https://plugins.trac.wordpress.org/changeset/3529605/
• https://plugins.trac.wordpress.org/changeset/3703929/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/d3b9464c-dcc4-4ae8-816f-1572f84dfe08?source=cve

Published

Oct 15, 2026

Last Modified

Oct 15, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-81441Dell OpenManage Server Administrator, versions prior to 11.1…5.5
• CVE-2026-81442Dell OpenManage Server Administrator, versions prior to 11.1…8.1
• CVE-2026-81443Dell OpenManage Server Administrator, versions prior to 11.1…6.4
• CVE-2026-81445Dell OpenManage Server Administrator, versions prior to 11.1…7.2
• CVE-2026-81446Dell OpenManage Server Administrator, versions prior to 11.1…7.4
• CVE-2026-81447Dell OpenManage Server Administrator, versions prior to 11.1…6.8
• CVE-2026-81452Dell Alienware Command Center (AWCC), versions prior to 6.14…7
• CVE-2026-81453Dell OpenManage Server Administrator, versions prior to 11.1…6.5
• CVE-2026-81455Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766…8.6
• CVE-2026-81467Dell ThinOS 10, versions prior to 2605_10. 2616, contains an…9.8
• CVE-2026-81468Dell ThinOS 10, versions prior to 2605_10. 2616, contains an…7.2
• CVE-2026-81469Dell Inventory Collector Client, versions prior to 15.0.0, c…7.8