Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light, with AI-generated Chinese analysis, references, and POCs.

Vendor: Holest Engineering

CVE ID	Title	CVSS	Severity	Published
CVE-2025-10656	Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Missing Authorization to Unauthenticated Privilege Escalation via Admin Account Creation CWE-863	9.8	Critical	2026-07-29
CVE-2025-48122	WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - SQL Injection Vulnerability CWE-89	9.3	Critical	2025-06-09
CVE-2025-48123	WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Remote Code Execution (RCE) Vulnerability CWE-94	10.0	Critical	2025-06-09
CVE-2025-48124	WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Arbitrary File Download Vulnerability CWE-22	7.5	High	2025-06-09
CVE-2025-48129	WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Privilege Escalation Vulnerability CWE-266	9.8	Critical	2025-06-09
CVE-2025-39378	WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Local File Inclusion vulnerability CWE-98	7.5	High	2025-04-24

All 6 known CVE vulnerabilities affecting Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light with full Chinese analysis, references, and POCs where available.