Vulnerabilities

TI-2025-09755 CVE-2025-10656 · GHSA-p226-wwrr-fmww

Incorrect authorization in holest Spreadsheet Price Changer for WooCommerce and WP…

MEDIUM 49

The Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.37 vi the user_filter function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00528 Published 2026-07-29 No fix listed CWE-863

TI-2019-11925 CVE-2019-15865 · GHSA-w2xq-3jj9-9r5f

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.

LOW 39

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00704 Published 2019-09-03 No fix listed CWE-352

TI-2019-11924 CVE-2019-15864 · GHSA-vpv8-4ccj-538f

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.

LOW 29

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0095 Published 2019-09-03 No fix listed CWE-79

Vulnerabilities

Filters

Incorrect authorization in holest Spreadsheet Price Changer for WooCommerce and WP…

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.