Log in Start free

Holest Engineering

Products

ProductCVEsExploitedLatest
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light5–Jun 9, 2025
Selling Commander for WooCommerce1–Nov 6, 2025

Exploited and recent CVEs

  • CVE-2025-60243 Critical 9.8 WordPress Selling Commander for WooCommerce plugin <= 1.2.46 - Privilege Escalation vulnerability 0.4%
  • CVE-2025-48122 Critical 9.3 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - SQL Injection Vulnerability 0.4%
  • CVE-2025-48123 Critical 10.0 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Remote Code Execution (RCE) Vulnerability 0.5%
  • CVE-2025-48124 High 7.5 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Arbitrary File Download Vulnerability 0.6%
  • CVE-2025-48129 Critical 9.8 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Privilege Escalation Vulnerability 0.6%
  • CVE-2025-39378 High 7.5 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Local File Inclusion vulnerability 0.8%