← CVE Intelligence

CVE-2025-12820

Pure WC Variation Swatches <= 1.1.7 - Unauthenticated Settings Update PUBLISHED

Description (CNA)

The Pure WC Variation Swatches WordPress plugin through 1.1.7 does not have an authorization check when updating its settings, which could allow any authenticated users to update them.

Affected (CNA)

Vendor / productVersions
Unknown / Pure WC Variation Swatchesaffected 0 through 1.1.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.