1030 matches found
CVE-2025-48123
Improper Control of Generation of Code 'Code Injection' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Code Injection.This issue affects Spreadsheet Price Changer for...
CVE-2025-48124
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Path Traversal.This issue affects Spreadsheet...
CVE-2025-48122
CVE-2025-48122 affects Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light, vulnerable to SQL Injection due to improper neutralization of special elements. Affected versions are n/a through 2.4.37. The issue can permit unauthorized SQL execution and exposure of ...
CVE-2025-48124 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Arbitrary File Download Vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light allows Path Traversal. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from...
CVE-2025-48123
CVE-2025-48123 is a confirmed Remote Code Execution (RCE) vulnerability in the WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light (Holest Engineering)
CVE-2025-48124
CVE-2025-48124 describes an improper limitation of a pathname to a restricted directory (Path Traversal) in WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light. Public sources enumerate the affected software as Spreadsheet Price Changer for WooCommerce and WP E-co...
CVE-2025-48129 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Privilege Escalation Vulnerability
Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet Price Changer for WooCommerce and WP...
CVE-2025-48129
The CVE-2025-48129 issue affects the WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light, with vulnerable versions up to 2.4.37. The root cause is an Incorrect Privilege Assignment that enables Privilege Escalation (e.g., unauthorized admin-level access). Public m...
CVE-2025-48129 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Privilege Escalation Vulnerability
Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light allows Privilege Escalation. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through 2.4.37...
WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light SQL注入漏洞
WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light is a plugin for WordPress that makes it easy to change prices for WooCommerce and WP e-commerce products. WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light is vulnerable to SQL injection. The...
WordPress Spreadsheet Price Changer 2.4.37 Privilege Escalation
WordPress Spreadsheet Price Changer plugin versions 2.4.37 and below suffer from a privilege escalation vulnerability...
WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light 安全漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Spreadsheet Price Changer for WooCommerce a...
PT-2025-24406 · Woocommerce · Spreadsheet Price Changer For Woocommerce/Wp E-Commerce – Light
Name of the Vulnerable Software and Affected Versions: Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions 2.4.37 and earlier Description: The issue is related to an Incorrect Privilege Assignment, allowing Privilege Escalation. Recommendations: For versions 2.4.37 and...
PT-2025-24513 · Unknown · Spreadsheet Price Changer For Woocommerce/Wp E-Commerce – Light
Name of the Vulnerable Software and Affected Versions: Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions 2.4.37 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows a...
WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Spreadsheet Price...
WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light 代码注入漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce...
CVE-2024-3674
The Inline Google Spreadsheet Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gdoc' shortcode in all versions up to, and including, 0.13.2 due to insufficient input sanitization and output escaping on user supplied attributes such as 'chartresolution'...
CVE-2024-56365
PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to unauthorized reflected cross-site scripting in the constructor of the Downloader class. Using the /vendor/phpoffice/phpspreadsheet/samples/download.php...
CVE-2024-56412
PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to bypass of the cross-site scripting sanitizer using the javascript protocol and special characters. An attacker can use special characters, so that the...