WordPress security by component

Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light

Plugin description

Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Jun 09, 2025; the highest CVE/CNA score is 10.

Plugin slug: excel-like-price-change-for-woocommerce-and-wp-e-commerce-light

Latest vulnerability

CVE-2025-48129: Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: Privilege escalation or authentication bypass

Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.

PublishedJun 09, 2025

Safe version guidanceSee mitigation notes

		Safe version
Jun 09, 2025	CVE-2025-48129 Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: Privilege escalation or authentication bypass Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE9.8 NVDPending
Jun 09, 2025	CVE-2025-48124 Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: Filesystem traversal Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE7.5 NVDPending
Jun 09, 2025	CVE-2025-48123 Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: Code execution Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE10.0 NVDPending
Jun 09, 2025	CVE-2025-48122 Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: SQL injection Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE9.3 NVDPending
Apr 24, 2025	CVE-2025-39378 Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: Filesystem traversal Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE7.5 NVDPending