Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light vulnerabilities

5 known vulnerabilities in Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light from Holest Engineering. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Spreadsheet Price Changer for WooCommerce and…: Incorrect Privilege Assignment

  CVE-2025-48129Jun 9, 2025Holest Engineering

  Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet Pr

• 7.5 High severity

  Spreadsheet Price Changer for WooCommerce and…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-48124Jun 9, 2025Holest Engineering

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Path T

• 10.0 Critical severity

  Spreadsheet Price Changer for WooCommerce and…: Improper Control of Generation of Code

  CVE-2025-48123Jun 9, 2025Holest Engineering

  Improper Control of Generation of Code ('Code Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Code Injection.This issue a

• 9.3 Critical severity

  Spreadsheet Price Changer for WooCommerce and…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-48122Jun 9, 2025Holest Engineering

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows

• 7.5 High severity

  Spreadsheet Price Changer for WooCommerce and…: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-39378Apr 24, 2025Holest Engineering

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-com