CVE-2026-8145 | wpxpo WholesaleX Plugin up to 3.0.8 on WordPress wholesalex_registration_role privileges management

October 15, 2026 Yanac

A vulnerability labeled as critical has been found in wpxpo WholesaleX Plugin up to 3.0.8 on WordPress. Impacted is an unknown function. The manipulation of the argument wholesalex_registration_role results in improper privilege management.

This vulnerability is reported as CVE-2026-8145. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More