CVE-2026-27542: Rymera Web Co Pty Ltd Woocommerce Wholesale Lead Capture

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through <= 2.0.3.1.

Affected products

• Rymera Web Co Pty Ltd Woocommerce Wholesale Lead Capture: up to and including 2.0.3.1

Published 2026-03-19. Last modified 2026-06-17.