Access violation vulnerability in WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) 1.3.1

A plugin for WordPress called WholesaleX has a security issue that allows people to change data without permission. This happens because the plugin doesn’t check if someone has the right ability before using the wc_install_callback function. This problem exists in versions 1.3.1 and below. It means that people who are logged in and have subscriber-level access or higher can install woocommerce without permission.