CVE-2026-111956

The WholesaleX WordPress plugin before version 3.0.9 contains a vulnerability where it fails to protect or remove a user-import file . Because this file is stored in a publicly accessible location with a predictable name , unauthenticated users can download the most recently imported user data. T...