Holest Engineering vulnerabilities
We track 6 vulnerabilities in Holest Engineering products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2025.
Latest Holest Engineering vulnerabilities
- 9.8 Critical severity
Selling Commander for WooCommerce: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in Holest Engineering Selling Commander for WooCommerce selling-commander-connector allows Privilege Escalation.This issue affects Selling Commander for WooCommerce: from n/a through <= 1.2.46.
- 9.8 Critical severity
Spreadsheet Price Changer for WooCommerce and…: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet Pr
- 7.5 High severity
Spreadsheet Price Changer for WooCommerce and…: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Path T
- 10.0 Critical severity
Spreadsheet Price Changer for WooCommerce and…: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Code Injection.This issue a
- 9.3 Critical severity
Spreadsheet Price Changer for WooCommerce and…: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows
- 7.5 High severity
Spreadsheet Price Changer for WooCommerce and…: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-com