Skip to content
PluginCanary

WholesaleX

WholesaleX - Wholesale Pricing & B2B Solution
by WPXPO · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 2 Nov 2026, 75 releases in 24 months, no unpatched vulnerabilities.

85/ 100 Canary Score
Sub-scores for WholesaleX
Ownership100
Maintenance100
Security85
Support40
ReputationNo data

How the score works

Quick answers

Is WholesaleX still maintained?
Yes. Last release 2 Nov 2026, 75 releases in the last 24 months. 2 Nov 2026 · wordpress.org
Who owns WholesaleX, and has it changed hands?
No change recorded. Main committer wpxpo since Nov 2022. 3 Nov 2026 · SVN log
Was WholesaleX removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WholesaleX safe?
7 known vulnerabilities, all fixed (latest in 3.0.9). Not on the exploited list. 19 Oct 2026 · Wordfence Intelligence
Is the latest WholesaleX update safe to install?
No ownership change before 3.1.8. No one-star spike after it. 2 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master1 Nov 2022 to 1 Nov 2022, 1 commits
wpxpo10 Nov 2022 to 2 Nov 2026, 171 commits

2 committers recorded. No ownership change since 2022.

Maintenance

Last release
3 days ago
Releases, 24 months
75
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for WholesaleX
Q1 20249
Q2 202410
Q3 20247
Q4 20248
Q1 20258
Q2 202512
Q3 20259
Q4 20256
Q1 20265
Q2 20268
Q3 202617
Q4 20265

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star66
4 star1
3 star1
2 star0
1 star0

Security record

3 vulnerabilities in 24 months (7 on record), all patched (latest fixed in 3.0.9).

Show 7 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
19 Oct 2026WholesaleX - All-in-One B2B Solution with Wholesale Pricing < 3.0.9 - Unauthenticated Account Activation Bypass5.3< 3.0.93.0.9Patched before disclosure
19 Oct 2026WholesaleX <= 3.0.8 - Unauthenticated Information Exposure5.3<= 3.0.83.0.9Patched before disclosure
14 Oct 2026WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'5.4<= 3.0.83.0.9Patched before disclosure
29 Mar 2024WholesaleX <= 1.3.2 - Unauthenticated Privilege Escalation6.5<= 1.3.21.3.3Patched before disclosure
26 Mar 2024WholesaleX <= 1.3.1 - Sensitive Information Exposure via export_users4.3<= 1.3.11.3.2Patched before disclosure
26 Mar 2024WholesaleX <= 1.3.1 - Authenticated(Subscriber+) Missing Authorization via multiple AJAX actions4.3<= 1.3.11.3.2Patched before disclosure
26 Mar 2024WholesaleX - WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) <= 1.3.2 - Unauthenticated PHP Object Injection9.8<= 1.3.21.3.3Patched before disclosure

Changelog mentions of security fixes: 3.0.8 (authorization, nonce); 3.0.9 (security); 3.1.0 (security, nonce, escaping, sanitize); 3.1.1 (security); 3.1.5 (security, authorization).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

40% of 5 support threads resolved in the last 2 months.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WholesaleX
4 May 2026210
11 May 20261,431
18 May 20261,532
25 May 2026298
1 Jun 2026274
8 Jun 20262,252
15 Jun 20261,359
22 Jun 2026453
29 Jun 2026258
6 Jul 20261,431
13 Jul 2026782
20 Jul 20261,867
27 Jul 20261,566
3 Aug 2026619
10 Aug 20262,615
17 Aug 20261,733
24 Aug 20262,929
31 Aug 20262,115
7 Sep 20261,513
14 Sep 2026390
21 Sep 2026989
28 Sep 20262,047
5 Oct 20261,646
12 Oct 2026163
19 Oct 2026850
26 Oct 20263,005
2 Nov 20261,090

Weekly downloads over the last 4 weeks are 3% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

ELEX WooCommerce Catalog ModeScore 100 · 10,000+YITH WooCommerce Catalog ModeScore 96 · 60,000+Product Enquiry for WooCommerce (NowScore 94 · 10,000+B2BKingScore 93 · 10,000+Wholesale SuiteScore 91 · 20,000+

Facts

Version3.1.8
AuthorWPXPO
Added10 Nov 2022
Last updated2 Nov 2026
Active installs2,000+
Requires WordPress6.8
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsb2b, woocommerce b2b, wholesale prices, wholesale pricing, woocommerce wholesale

Other plugins by this author: WowStore - Store Builder & Product Blocks for WooCommerce, WowShipping - Table Rate & Weight Based Shipping, WowInvoice - PDF Invoices & Packing Slips, WowRecommend - Show Recommendations, Related Products, Recently Viewed, and Cross-sells for WooCommerce

Questions

Is WholesaleX still maintained?

Yes. Last release 2 Nov 2026, 75 releases in the last 24 months.

Who owns WholesaleX, and has it changed hands?

No change recorded. Main committer wpxpo since Nov 2022.

Was WholesaleX removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WholesaleX safe?

7 known vulnerabilities, all fixed (latest in 3.0.9). Not on the exploited list.

Is the latest WholesaleX update safe to install?

No ownership change before 3.1.8. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue