{"cve":"CVE-2026-27541","enrichment":{"affected":[{"configurations":[{"platform":null,"status":"affected","versions":{"scheme":"semver","value":"[0,2.2.6]"}}],"enrichment":{"confidence":100.0,"confidence_source":"cna","scores":[{"score":100.0,"source":"cna"}]},"original":{"product":"Wholesale Suite","source":"cna","vendor":"Josh Kohlbach"},"product":"wholesale_suite","vendor":"josh_kohlbach"},{"configurations":[{"platform":null,"status":"unaffected","versions":null}],"enrichment":{"confidence":80.0,"confidence_source":"inferred","scores":[{"score":80.0,"source":"inferred"},{"score":100.0,"source":"matching"}]},"product":"wordpress","vendor":"wordpress"}],"created":"2026-03-06T15:11:57.971706+00:00","updated":"2026-11-05T13:00:16.589451+00:00","vendors":["josh_kohlbach","josh_kohlbach$PRODUCT$wholesale_suite","wordpress","wordpress$PRODUCT$wordpress"]},"epss":{"score":0.0028},"mitre":{"cpes":[],"created":"2026-03-05T05:54:03.112000+00:00","description":"Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite allows Privilege Escalation.\n\nThis issue affects Wholesale Suite: through 2.2.6.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"mitre_repo_path":"cves/2026/27xxx/CVE-2026-27541.json","references":["https://patchstack.com/database/Wordpress/Plugin/woocommerce-wholesale-prices/vulnerability/wordpress-wholesale-suite-plugin-2-2-1-privilege-escalation-vulnerability?_s_id=cve"],"title":"WordPress Wholesale Suite plugin <= 2.2.6 - Privilege Escalation vulnerability","updated":"2026-11-05T11:07:01.599000+00:00","vendors":[],"weaknesses":["CWE-266"]},"nvd":{"cpes":[],"created":"2026-03-05T06:16:29.953000+00:00","description":"Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite allows Privilege Escalation.\n\nThis issue affects Wholesale Suite: through 2.2.6.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2026/CVE-2026-27541.json","references":["https://patchstack.com/database/Wordpress/Plugin/woocommerce-wholesale-prices/vulnerability/wordpress-wholesale-suite-plugin-2-2-1-privilege-escalation-vulnerability?_s_id=cve"],"title":null,"updated":"2026-11-05T11:16:38.913000+00:00","vendors":[],"weaknesses":["CWE-266"]},"opencve":{"changes":[{"created":"2026-03-05T06:15:00+00:00","data":[{"details":{"new":"Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a through <= 2.2.6.","old":null},"type":"description"},{"details":{"new":"WordPress Wholesale Suite plugin <= 2.2.6 - Privilege Escalation vulnerability","old":null},"type":"title"},{"details":{"added":["CWE-266"],"removed":[]},"type":"weaknesses"},{"details":{"added":["https://patchstack.com/database/Wordpress/Plugin/woocommerce-wholesale-prices/vulnerability/wordpress-wholesale-suite-plugin-2-2-1-privilege-escalation-vulnerability?_s_id=cve"],"removed":[]},"type":"references"}],"id":"17b94a64-c522-458b-a215-2a09b4c9c2a9"},{"created":"2026-03-06T15:30:00+00:00","data":[{"details":["josh_kohlbach","josh_kohlbach$PRODUCT$wholesale_suite","wordpress","wordpress$PRODUCT$wordpress"],"type":"first_time"},{"details":{"added":["josh_kohlbach","josh_kohlbach$PRODUCT$wholesale_suite","wordpress","wordpress$PRODUCT$wordpress"],"removed":[]},"type":"vendors"}],"id":"f23e4adc-8ac8-4f12-aa62-a3f32cc6c0be"},{"created":"2026-03-09T15:30:00+00:00","data":[{"details":{"added":{"cvssV3_1":{"score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L"},"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"6a4d04cd-9764-4d20-8055-e69912a3c8e8"},{"created":"2026-04-29T10:15:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"cvssV3_1":{"new":{"score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},"old":{"score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L"}}}},"type":"metrics"}],"id":"0873b964-e0c7-42ee-bcd3-8c58d672776c"},{"created":"2026-11-05T11:15:00+00:00","data":[{"details":{"new":"Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite allows Privilege Escalation.\n\nThis issue affects Wholesale Suite: through 2.2.6.","old":"Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a through <= 2.2.6."},"type":"description"}],"id":"9a10aaac-2726-4aa1-ba5c-b4ceb3f140b2"}],"cpes":{"data":[],"providers":[]},"created":{"data":"2026-03-05T05:54:03.112000+00:00","provider":"mitre"},"description":{"data":"Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite allows Privilege Escalation.\n\nThis issue affects Wholesale Suite: through 2.2.6.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.0028},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://patchstack.com/database/Wordpress/Plugin/woocommerce-wholesale-prices/vulnerability/wordpress-wholesale-suite-plugin-2-2-1-privilege-escalation-vulnerability?_s_id=cve"],"providers":["mitre","nvd"]},"title":{"data":"WordPress Wholesale Suite plugin <= 2.2.6 - Privilege Escalation vulnerability","provider":"mitre"},"updated":{"data":"2026-11-05T11:07:01.599000+00:00","provider":"mitre"},"vendors":{"data":["josh_kohlbach","josh_kohlbach$PRODUCT$wholesale_suite","wordpress","wordpress$PRODUCT$wordpress"],"providers":["enrichment"]},"weaknesses":{"data":["CWE-266"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2026-03-05T05:54:03.112000+00:00","description":"Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite allows Privilege Escalation.\n\nThis issue affects Wholesale Suite: through 2.2.6.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L"},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"references":[],"title":"WordPress Wholesale Suite plugin <= 2.2.6 - Privilege Escalation vulnerability","updated":"2026-03-09T14:33:32.672000+00:00","vendors":[],"vulnrichment_repo_path":"2026/27xxx/CVE-2026-27541.json","weaknesses":[]}}