plugin

Selling Commander Connector Vulnerabilities

1 known security issue reported for the Selling Commander Connector WordPress plugin. Most recent disclosed Jun 19, 2025.

1 critical

Running Selling Commander Connector on your site? Check whether your installed version is affected.

Scan your site free

Selling Commander for WooCommerce <= 1.2.46 - Unauthenticated Privilege Escalation

critical

The Selling Commander for WooCommerce – connector plugin plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.46. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.

CVSS:
9.8
Affected:
up to 1.2.46
Fix:
No patched version reported
Disclosed:
Jun 19, 2025

CVE-2025-60243 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database