This vulnerability in the Wholesale Suite plugin for WooCommerce arises from incorrect privilege assignment, which enables users with certain privileges to escalate their access rights improperly. The affected versions range from initial releases through 2.2.4.2. The CVSS 3.1 base score of 7.2 reflects network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No official patch or fix details are available from the vendor or advisory sources at this time.

Successful exploitation could allow an attacker with some level of privilege to escalate their access, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. This could result in unauthorized access to sensitive data and disruption of service within the Wholesale Suite environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and monitor for unusual privilege escalations. Avoid granting unnecessary privileges to users within the Wholesale Suite environment.