Vulnerabilities

TI-2025-31803 CVE-2025-49888 · GHSA-h6p3-q2rf-cj69

WordPress PW WooCommerce On Sale! plugin <= 1.39 - Broken Access Control Vulnerability

LOW 31

Missing Authorization vulnerability in pimwick PW WooCommerce On Sale! pw-woocommerce-on-sale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PW WooCommerce On Sale!: from n/a t…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0028 Published 2025-07-16 No fix listed CWE-862

TI-2025-29970 CVE-2025-47473 · GHSA-2rm8-gh6q-8wpp

WordPress PW WooCommerce Bulk Edit plugin <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in pimwick PW WooCommerce Bulk Edit pw-bulk-edit allows Cross Site Request Forgery.This issue affects PW WooCommerce Bulk Edit: from n/a through <= 2.134.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00163 Published 2025-05-07 No fix listed CWE-352

Vulnerabilities

Filters

WordPress PW WooCommerce On Sale! plugin <= 1.39 - Broken Access Control Vulnerability

WordPress PW WooCommerce Bulk Edit plugin <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability