CVE-2026-14279

creationtimestamp| type| source ---|---|--- 2026-08-15 08:37:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fzgyuv6d4rl7y 2026-08-15 09:33:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mt4ek6gs5l2n 2026-08-15 10:00:34+00:00| seen|...

CVE-2026-14279

The Wholesale Market plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.2.2 via the cedwholesalerequestsend AJAX action. The cedwholesalerequestsendcallback handler only verifies a nonce which is exposed to any authenticated user through wplocalizescrip...