CVE-2025-12820

The Pure WC Variation Swatches WordPress plugin, in versions through 1.1.7 , is vulnerable to an unauthenticated settings update (or lack of authorization check) when updating its settings. This flaw allows any authenticated user to modify the plugin's settings. To remediate this vulnerability, u...

PT-2025-52546

Name of the Vulnerable Software and Affected Versions Pure WC Variation Swatches WordPress plugin versions through 1.1.7 Description The Pure WC Variation Swatches WordPress plugin does not perform authorization checks when updating its settings. This allows any authenticated user to modify these...