Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority MEDIUM 49

Incorrect Privilege Assignment vulnerability in Holest Engineering Selling Commander for WooCommerce selling-commander-connector allows Privilege Escalation.This issue affects Selling Commander for WooCommerce: from n/a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00437 Published 2025-11-06 No fix listed CWE-266
Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woo…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00368 Published 2025-06-09 No fix listed CWE-89
Priority MEDIUM 49

Improper Control of Generation of Code ('Code Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00489 Published 2025-06-09 No fix listed CWE-94
Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommer…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00564 Published 2025-06-09 No fix listed CWE-22
Priority MEDIUM 50

Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Esca…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00578 Published 2025-06-09 No fix listed CWE-266
Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-p…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0076 Published 2025-04-24 No fix listed CWE-98