Skip to content
Threat Feed
Subscribe

Product

Spreadsheet Price Changer for WooCommerce and WP E-Commerce – Light (<= 2.4.37)

1 brief RSS
critical advisory

CVE-2025-10656: WordPress Spreadsheet Price Changer Plugin Missing Authorization Vulnerability

CVE-2025-10656 describes a Missing Authorization vulnerability in the Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light plugin for WordPress, affecting all versions up to and including 2.4.37, which allows unauthenticated attackers to create new administrator accounts, leading to privilege escalation and potential full control over affected WordPress sites.

Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light wordpress plugin web cve missing-authorization privilege-escalation
3t 1c