Approved changes feed: RSS · Atom

cpe:2.3:a:holest_engineering:spreadsheet_price_changer_for_woocommerce_and_wp_e-commerce_–_light:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHolest Engineering (6ddda406-2499-5391-bfa6-d3324e2ad654)
ProductSpreadsheet Price Changer For Woocommerce And Wp E Commerce – Light (4b947c48-9a92-525f-8f88-179288907573)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-48129 vulnerable 2026-06-08 07:27:15.509867 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Privilege Escalation Vulnerability
CRITICAL (9.8)
Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through <= 2.4.37.
Published: 2025-06-09T15:54:02.694Z
Updated: 2026-04-28T16:12:52.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48124 vulnerable 2026-06-08 07:27:15.503642 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Arbitrary File Download Vulnerability
HIGH (7.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Path Traversal.This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through <= 2.4.37.
Published: 2025-06-09T15:54:05.023Z
Updated: 2026-04-28T16:12:51.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48123 vulnerable 2026-06-08 07:27:15.503363 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Remote Code Execution (RCE) Vulnerability
CRITICAL (10)
Improper Control of Generation of Code ('Code Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Code Injection.This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through <= 2.4.37.
Published: 2025-06-09T15:54:05.742Z
Updated: 2026-04-28T16:12:51.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48122 vulnerable 2026-06-08 07:27:15.503018 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - SQL Injection Vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows SQL Injection.This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through <= 2.4.37.
Published: 2025-06-09T15:54:06.451Z
Updated: 2026-05-12T00:22:57.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39378 vulnerable 2026-06-08 07:23:06.473793 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Local File Inclusion vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows PHP Local File Inclusion.This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through <= 2.4.37.
Published: 2025-04-24T16:08:39.225Z
Updated: 2026-04-28T16:12:29.761Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.