WordPress security by component

Lucky Wheel for WooCommerce – Spin a Sale

Plugin description

Lucky Wheel for WooCommerce – Spin a Sale is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 30, 2025; the highest CVE/CNA score is 7.2.

Plugin slug: woo-lucky-wheel

Latest vulnerability

CVE-2025-14509: Lucky Wheel for WooCommerce – Spin a Sale: Code execution

Lucky Wheel for WooCommerce – Spin a Sale is affected by code execution. Exploitation requires at least administrator-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedDec 30, 2025

Safe version guidanceSee mitigation notes

		Safe version
Dec 30, 2025	CVE-2025-14509 Lucky Wheel for WooCommerce – Spin a Sale: Code execution Lucky Wheel for WooCommerce – Spin a Sale is affected by code execution. Exploitation requires at least administrator-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE7.2 NVDPending