Vulnerabilities and security researches forexcel-like-price-change-for-woocommerce-and-wp-e-commerce-light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light

Apr 25, 2025

CVE, Research URL: CVE-2025-39378
Home page URL: Security reports for Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
Application: Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
Date: Apr 24, 2025
Research Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light allows PHP Local File Inclusion. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through 2.4.37.
Affected versions: Min -, max -.
Status: vulnerable

Jun 04, 2025

CVE, Research URL: CVE-2025-48124
Home page URL: Security reports for Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
Application: Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
Date: Jun 09, 2025
Research Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light allows Path Traversal. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through 2.4.37.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2025-48129
Home page URL: Security reports for Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
Application: Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
Date: Jun 09, 2025
Research Description: Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light allows Privilege Escalation. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through 2.4.37.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2025-48123
Home page URL: Security reports for Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
Application: Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
Date: Jun 09, 2025
Research Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light allows Code Injection. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through 2.4.37.
Affected versions: Min -, max -.
Status: vulnerable

Jun 15, 2025

CVE, Research URL: CVE-2025-48122
Home page URL: Security reports for Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
Application: Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
Date: Jun 09, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light allows SQL Injection. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through 2.4.37.
Affected versions: Min -, max -.
Status: vulnerable