Product
The Wholesale Market plugin for WordPress up to version 2.2.2 contains a privilege escalation vulnerability via the ced_wholesale_request_send AJAX action that allows authenticated users to elevate to Administrator.