CVE-2025-48123

CRITICO 10.0CVE-2025-48123 · Published 09/06/2025 · updated 17/06/2026

In breve

CVE-2025-48123 è una vulnerabilità CRITICO (CVSS 10.0).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.47%, superiore al 40.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Code Injection.This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through <= 2.4.37.

References

patchstack.com/database/Wordpress/Plugin/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/vulnerability/wordpress-spreadsheet-price-changer-for-woocommerce-and-wp-e-commerce-light-2-4-37-remote-code-execution-rce-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free