Selling Commander for WooCommerce – connector plugin, CVE-2025-60243

CVE, Research URL: CVE-2025-60243
Home page URL: Security reports for Selling Commander for WooCommerce – connector plugin
Application: Selling Commander for WooCommerce – connector plugin
Published on: Nov 06, 2025
Research Description: Incorrect Privilege Assignment vulnerability in Holest Engineering Selling Commander for WooCommerce selling-commander-connector allows Privilege Escalation.This issue affects Selling Commander for WooCommerce: from n/a through <= 1.2.46.
Affected versions: max 1.2.46.
Status: vulnerable

Selling Commander for WooCommerce &#8211; connector plugin, CVE-2025-60243