{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2026-27542/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2026-27542/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2026-27542/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2026-27542/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2026-27542/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2026-27542/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2026-27542"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2026-27542"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2026/CVE-2026-27542.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2026-27542\n\ninfo:\n  name: WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation\n  author: theamanrawat,pdresearch\n  severity: critical\n  description: |\n    Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture <= 2.0.3.1 contains a broken access control vulnerability caused by incorrect privilege assignment, letting attackers escalate their privileges, exploit requires no special conditions.\n  impact: |\n    Attackers can escalate their privileges, potentially gaining unauthorized access to restricted functions or data.\n  remediation: |\n    Update to the latest version beyond 2.0.3.1.\n  reference:\n    - https://github.com/Nxploited/CVE-2026-27542-CVE-2026-27540-\n    - https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-wholesale-lead-capture\n    - https://nvd.nist.gov/vuln/detail/CVE-2026-27542\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2026-27542\n    epss-score: 0.01776\n    epss-percentile: 0.78285\n    cwe-id: CWE-266\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: rymera-web-co\n    product: woocommerce-wholesale-lead-capture\n    framework: wordpress\n    fofa-query: body=\"/wp-content/plugins/woocommerce-wholesale-lead-capture/\"\n    shodan-query: http.html:\"/wp-content/plugins/woocommerce-wholesale-lead-capture/\"\n    publicwww-query: \"/wp-content/plugins/woocommerce-wholesale-lead-capture/\"\n  tags: cve,cve2026,wp,wordpress,woocommerce,wholesale,privesc,unauth,vkev,vuln\n\nflow: http(1) && http(2)\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/wp-content/plugins/woocommerce-wholesale-lead-capture/readme.txt\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - 'contains(body, \"WooCommerce Wholesale Lead Capture\")'\n          - 'compare_versions(version, \"<= 2.0.3.1\")'\n        condition: and\n        internal: true\n\n    extractors:\n      - type: regex\n        name: version\n        part: body\n        group: 1\n        regex:\n          - '(?m)Stable tag:\\s+([0-9]+\\.[0-9]+(?:\\.[0-9]+(?:\\.[0-9]+)*)?)'\n        internal: true\n\n  - raw:\n      - |\n        POST /wp-admin/admin-ajax.php HTTP/1.1\n        Content-Type: application/x-www-form-urlencoded\n\n        action=wwlc_create_user\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - '!regex(\"^(-1|0)\\\\s*$\", body) && len(body) > 2'\n          - 'contains_all(body, \"wwlc_firstname\", \"wwlc_email\")'\n        condition: and\n# digest: 4a0a004730450220478537e2b2295f8daf4d958b1cdc5f57a10de109992624b222559668210271730221008923930d9bb376abc803f4f336d1bea638e547d4d5ff6436edc72bce0209dfd8:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2026-27542"}