Read the docs

Holest Engineering

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Holest Engineering records in CISA KEV

No Holest Engineering vulnerabilities are listed in CISA KEV.

Records

6 records

Priority MEDIUM 50

Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Esca…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00578 Published 2025-06-09 No fix listed CWE-266
Priority MEDIUM 49

Incorrect Privilege Assignment vulnerability in Holest Engineering Selling Commander for WooCommerce selling-commander-connector allows Privilege Escalation.This issue affects Selling Commander for WooCommerce: from n/a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00437 Published 2025-11-06 No fix listed CWE-266
Priority MEDIUM 49

Improper Control of Generation of Code ('Code Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00489 Published 2025-06-09 No fix listed CWE-94
Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woo…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00368 Published 2025-06-09 No fix listed CWE-89
Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommer…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00564 Published 2025-06-09 No fix listed CWE-22
Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-p…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0076 Published 2025-04-24 No fix listed CWE-98
Open these records in search →