VulnScan

WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability

Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.

What is CVE-2026-27540?

CVE-2026-27540 is a vulnerability classified as Unrestricted Upload of File with Dangerous Type, affecting Woocommerce Wholesale Lead Capture. This vulnerability is rated Critical, with a CVSS score of 9. Current sources do not report this vulnerability as exploited.

Analyzing data...

Overview

Original source data

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through <= 2.0.3.1.

Affected products and scope

Analyzing data...

Technical details

Analyzing data...

Exploitability

Analyzing data...

Technical impact

Analyzing data...

Business impact

Analyzing data...

Remediation

Analyzing data...

Detection

Analyzing data...
Sources (7)
GCVE / Vulnerability-Lookup
CVE Program
Patchstack (CNA)
NVD
FIRST EPSS
Red Hat CSAF VEX
patchstack.com
Learn more

Run an in-depth assessment with complete web risk management

CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.

Explore CyStack VulnScan

Explore other related solutions

Woocommerce Wholesale Lead Capture

Rymera Web Co Pty Ltd.

View product
View all security vulnerabilities