Holest Engineering vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Holest Engineering products: 1 record(s), with severity, exploitation and fixes.

Selling Commander for WooCommerce 1

Exploited only (KEV) →

CVE-2025-60243 Critical · 9.8 CWE-266 Nov 6, 2025

WordPress Selling Commander for WooCommerce plugin <= 1.2.46 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Holest Engineering Selling Commander for WooCommerce selling-commander-connector allows Privilege Escalation.This issue affects Selling Commander for WooCommerce: from n/a through <= 1.2.46.