Vulnerabilidades en Holest Engineering
6 resultadosAnálisis Vexday
Holest Engineering apresenta um portfólio limitado de 6 vulnerabilidades, das quais 4 são críticas, porém nenhuma está sob ataque ativo conhecido. A ausência de divulgações recentes (últimos 90 dias) sugere um ciclo de patching mais lento ou produtos em fase madura, com a fraqueza dominante concentrada em CWE-266 (inadequação de privilégios), indicando risco potencial em controle de acesso que demanda validação em ambiente.
CVE-2025-39378HIGHWordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Local File Inclusion vulnerabilityEPSS 0.7%CVE-2025-48129CRITICALWordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Privilege Escalation VulnerabilityEPSS 0.6%CVE-2025-48124HIGHWordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Arbitrary File Download VulnerabilityEPSS 0.5%CVE-2025-48123CRITICALWordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Remote Code Execution (RCE) VulnerabilityEPSS 0.5%CVE-2025-60243CRITICALWordPress Selling Commander for WooCommerce plugin <= 1.2.46 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2025-48122CRITICALWordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - SQL Injection VulnerabilityEPSS 0.4%