Aller au contenu
Se connecter
6.5 Moyenne

CVE-2026-111955 The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation code is set before…

Description

The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation code is set before comparing it with the one supplied in a request, allowing unauthenticated users to activate pending accounts and bypass the administrator approval required before login.

Produits et versions touchés

Produit Versions touchées Corrigé en
WholesaleX 3.0 premières → < 3.0.9 3.0.9

Autres CVE de WholesaleX

Les 2 CVE de WholesaleX →
CVE-2026-111956 The WholesaleX WordPress plugin before 3.0.9 does not protect or remove the user-import file it keeps in a publicly… 5.9 Moyenne
Suivre cette CVE