CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2025-10656 — The Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin f...

·Source: NIST NVD

Updated:

Executive Summary

The Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.37 vi the user_filter function. This makes it possible for unauthenticated attackers to create admin accounts.

Analysis

The Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.37 vi the user_filter function. This makes it possible for unauthenticated attackers to create admin accounts. CVSS Score: 9.8. Published: 2026-07-29T10:16:31.407.

Indicators of Compromise (1)

CVE (1)
CVE-2025-10656
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 29, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

CFTC fines UBS $8 million for AML failures

The Commodity Futures Trading Commission today announced an order filing and settling charges against UBS Financial Services Inc., a registered futures commission merchant, for failing to diligently supervise the configuration and operation of its anti-money laundering transaction monitoring systems for wire transfers denominated in foreign currencies (FX).

Finextra
MEDIUMVulnerabilityNEW

Mastercard closes acquisition of BVNK

Mastercard (NYSE: MA) today completed its acquisition of BVNK, expanding the company’s strategy to support greater choice in how people and businesses exchange value by enabling interoperability across fiat and digital currencies.

Finextra
CRITICALVulnerabilityNEW

China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day

Chinese actors exploited the critical React2Shell exploit inside a day, while 88% of exploited vulnerabilities in H1 2026 were compromised within 48 hours of disclosure

Infosecurity Magazine