CVE-2025-12820

The Pure WC Variation Swatches WordPress plugin, in versions through 1.1.7 , is vulnerable to an authorization bypass. The application fails to perform sufficient authorization checks when processing requests to update its settings, which could allow any authenticated user to modify the plugin's ...

PT-2025-52546

Name of the Vulnerable Software and Affected Versions Pure WC Variation Swatches WordPress plugin versions through 1.1.7 Description The Pure WC Variation Swatches WordPress plugin does not perform authorization checks when updating its settings. This allows any authenticated user to modify these...