Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Holest Engineering vulnerabilities

6 published CVEs name Holest Engineering among the affected products.

Newest CVEs

  • CVE-2025-60243

    WordPress Selling Commander for WooCommerce plugin <= 1.2.46 - Privilege Escalation vulnerability

    Holest Engineering · Selling Commander for WooCommerce

    Critical9.8
  • CVE-2025-48122

    WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - SQL Injection Vulnerability

    Holest Engineering · Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light

    Critical9.3
  • CVE-2025-48123

    WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Remote Code Execution (RCE) Vulnerability

    Holest Engineering · Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light

    Critical10.0
  • CVE-2025-48124

    WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Arbitrary File Download Vulnerability

    Holest Engineering · Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light

    High7.5
  • CVE-2025-48129

    WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Privilege Escalation Vulnerability

    Holest Engineering · Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light

    Critical9.8
  • CVE-2025-39378

    WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Local File Inclusion vulnerability

    Holest Engineering · Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light

    High7.5