CVE-2025-9675

The CVE-2025-9675 entry affects the Voice Changer App up to version 1.1.0 and specifically the AndroidManifest.xml handling in the component com.tuyangkeji.changevoice. The underlying issue is improper export of Android application components due to some unknown processing of that manifest file, ...

Baviux Voice Changer App 安全漏洞

Baviux Voice Changer App is a voice changer software from Baviux. A security vulnerability exists in Baviux Voice Changer App version 1.1.0 and earlier, which stems from improper component export in the file AndroidManifest.xml, and could lead to a local attack...

WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light SQL Injection Vulnerability

WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light is a plugin for WordPress that makes it easy to change prices for WooCommerce and WP e-commerce products. WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light is vulnerable to SQL injection. The...

CVE-2025-48129

Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet Price Changer for WooCommerce and WP...

CVE-2025-48124

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Path Traversal.This issue affects Spreadsheet...

CVE-2025-48122

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows SQL Injection.This issue affects...

CVE-2025-48129

Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet Price Changer for WooCommerce and WP...

CVE-2025-48123

Improper Control of Generation of Code 'Code Injection' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Code Injection.This issue affects Spreadsheet Price Changer for...

CVE-2025-48124

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Path Traversal.This issue affects Spreadsheet...

CVE-2025-48122

CVE-2025-48122 affects Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light, vulnerable to SQL Injection due to improper neutralization of special elements. Affected versions are n/a through 2.4.37. The issue can permit unauthorized SQL execution and exposure of ...

CVE-2025-48124 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light allows Path Traversal. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from...

CVE-2025-48123

CVE-2025-48123 is a confirmed Remote Code Execution (RCE) vulnerability in the WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light (Holest Engineering)

CVE-2025-48124

CVE-2025-48124 describes an improper limitation of a pathname to a restricted directory (Path Traversal) in WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light. Public sources enumerate the affected software as Spreadsheet Price Changer for WooCommerce and WP E-co...

CVE-2025-48129 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light allows Privilege Escalation. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through 2.4.37...

CVE-2025-48129

The CVE-2025-48129 issue affects the WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light, with vulnerable versions up to 2.4.37. The root cause is an Incorrect Privilege Assignment that enables Privilege Escalation (e.g., unauthorized admin-level access). Public m...

CVE-2025-48129 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet Price Changer for WooCommerce and WP...

PT-2025-24512 · Woocommerce · Holest Engineering Spreadsheet Price Changer

Name of the Vulnerable Software and Affected Versions: Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions 2.4.37 and earlier Description: The issue is related to improper control of generation of code, also known as 'Code Injection'. This allows for co...

WordPress Spreadsheet Price Changer 2.4.37 Privilege Escalation

WordPress Spreadsheet Price Changer plugin versions 2.4.37 and below suffer from a privilege escalation vulnerability...

WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light 代码注入漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce...

WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light SQL注入漏洞

WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light is a plugin for WordPress that makes it easy to change prices for WooCommerce and WP e-commerce products. WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light is vulnerable to SQL injection. The...