Is WholesaleX safe?

Every recorded flaw

• Oct 21, 2026WholesaleX: Does not protect or remove the user-import file it keeps in a publicly accessible location under a predictable nameCVE-2026-111956 · fixed in 3.0.9 · reported by WPScanMedium 5.9
• Oct 21, 2026WholesaleX: Does not check that a stored account confirmation code is set before comparing it with the one supplied in a requestCVE-2026-111955 · fixed in 3.0.9 · reported by WPScanMedium 6.5
• Oct 15, 2026WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices: Limited Privilege EscalationCVE-2026-8145 · affects up to 3.0.8 · reported by WordfenceMedium 5.4
• May 17, 2024WholesaleX: Improper Privilege ManagementCVE-2024-30542 · affects up to 1.3.2 · reported by PatchstackCritical 9.8
• Mar 28, 2024WholesaleX: Deserialization of Untrusted DataCVE-2024-30224 · affects up to 1.3.2 · reported by PatchstackCritical 10
• Mar 26, 2024WholesaleX: Missing AuthorizationCVE-2024-30234 · affects up to 1.3.1 · reported by PatchstackMedium 6.5
• Mar 26, 2024WholesaleX: Exposure of Sensitive Information to an Unauthorized ActorCVE-2024-30233 · affects up to 1.3.1 · reported by PatchstackMedium 6.5

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.