Rymera Web Co WooCommerce Wholesale Lead Capture Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the WooCommerce Wholesale Lead Capture plugin by Rymera Web Co Pty Ltd, affecting versions through 2.0.3.1. This vulnerability allows low-privileged users to escalate their privileges, potentially leading to full control over the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to gain higher privileges, with the potential to take full control of the website.

Remediation

Users of the WooCommerce Wholesale Lead Capture plugin should update to version 2.0.3.2 or later. Patchstack users can enable auto-update for vulnerable plugins.