5.3
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
The Pure WC Variation Swatches WordPress plugin through 1.1.7 does not have an authorization check when updating its settings, which could allow any authenticated users to update them.
Basic Information
ID
CVE-2025-12820
Source
WPScan
Published
Dec 20, 2025 at 06:00
Modified
Dec 21, 2025 at 14:42
Affected Product
Vendor
Unknown
Product
Pure WC Variation Swatches
Affected Versions
Unknown Pure WC Variation Swatches 0