Holest Engineering Spreadsheet Price Changer For Woocommerce And Wp E-Commerce – Light
5 CVEs affecting Holest Engineering Spreadsheet Price Changer For Woocommerce And Wp E-Commerce – Light. Latest disclosed: 2025-06-09. Critical: 3, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-48123 | Critical | 10.0 | 2025-06-09 | Improper Control of Generation of Code ('Code Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Lig… |
CVE-2025-48129 | Critical | 9.8 | 2025-06-09 | Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-… |
CVE-2025-48122 | Critical | 9.3 | 2025-06-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooComme… |
CVE-2025-48124 | High | 7.5 | 2025-06-09 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce an… |
CVE-2025-39378 | High | 7.5 | 2025-04-24 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Holest Engineering Spreadsheet Price C… |