CVE 5.3 MEDIUM

Pure WC Variation Swatches <= 1.1.7 - Unauthenticated Settings Update_CVE-2025-12820

5.3 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

The Pure WC Variation Swatches WordPress plugin through 1.1.7 does not have an authorization check when updating its settings, which could allow any authenticated users to update them.

Basic Information

ID CVE-2025-12820
Source WPScan
Published Dec 20, 2025 at 06:00
Modified Dec 21, 2025 at 14:42

Affected Product

Vendor Unknown
Product Pure WC Variation Swatches
Affected Versions Unknown Pure WC Variation Swatches 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.