CVE-2026-27542 is an Incorrect Privilege Assignment vulnerability in the Woocommerce Wholesale Lead Capture plugin by Rymera Web Co Pty Ltd. It allows privilege escalation and affects versions up to 2.0.3.1. The vulnerability has a critical severity with a CVSS score of 9.8.