Volerion logoVolerion
Volerion logoVolerion

Wholesale Market and Wholesale Market for WooCommerce WordPress Plugins Cross-Site Request Forgery Vulnerability

Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Wholesale Market WordPress plugin versions prior to 2.2.2 and the Wholesale Market for WooCommerce WordPress plugin versions prior to 2.0.1. These plugins have a weak CSRF validation when users update their settings, potentially allowing attackers to exploit this flaw and manipulate a logged-in admin's settings.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in plugin settings by a logged-in admin.

Remediation

Users of the Wholesale Market WordPress plugin should update to version 2.2.2 or later. Those using the Wholesale Market for WooCommerce WordPress plugin should update to version 2.0.1 or later.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
2.2
impact
0.6
exploitability
6.5
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.