CRITICAL 9.8 NVD

CVE-2025-10656

The Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and i

The Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.37 vi the user_filter function. This makes it possible for unauthenticated attackers to create admin accounts.

References

Published: 2026-07-29 · Source: NVD · Feed updated: 2026-08-04

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-07-29 via NVD.

Risk Timeline

CVE Disclosed2026-07-29 · 5 days ago

Remediation Resources

Official Advisory

www.wordfence.com/threat-intel/vulnerabilities/id/1f891b68-72c4-4f94-b

Analysis & PoC

plugins.trac.wordpress.org/browser/excel-like-price-change-for-woocomm

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.