CVE-2025-48122 in Spreadsheet Price Changer for WooCommerce and WP E-commerce Plugininformazioni

Riassunto

di VulDB • 18/06/2026

Vulnerabilità di 'SQL Injection' (Mancata neutralizzazione degli elementi speciali utilizzati in un comando SQL) in Holest Engineering Spreadsheet Price Changer per WooCommerce e WP E-commerce – Light che consente l'iniezione SQL. Questo problema interessa Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: dalla versione n/a alla 2.4.37.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

Patchstack

Prenotare

15/05/2025

Divulgazione

09/06/2025

Moderazione

accettato

CPE

pronto

EPSS

0.00301

KEV

no

Attività

molto basso

Settore

Telecommunication, Transportation, ...

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-48122
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-48122
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-48122/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Want to know what is going to be exploited?

We predict KEV entries!