Spreadsheet Price Changer For Woocommerce And Wp E Commerce Light
Monthly
Privilege escalation to administrator in the Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light WordPress plugin (all versions through 2.4.37) lets unauthenticated attackers create new admin accounts through the unprotected user_filter function. Because no capability or nonce check gates the routine, any remote visitor can seize full control of the WordPress site, making this a critical site-takeover flaw; no public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Privilege escalation to administrator in the Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light WordPress plugin (all versions through 2.4.37) lets unauthenticated attackers create new admin accounts through the unprotected user_filter function. Because no capability or nonce check gates the routine, any remote visitor can seize full control of the WordPress site, making this a critical site-takeover flaw; no public exploit has been identified at time of analysis, and it is not listed in CISA KEV.