Upc Ean Barcode Generator Vulnerabilities

The UPC/EAN/GTIN Barcode Generator/Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted the...

CVSS:

4.3

Affected:

up to 2.0.2

Fixed in:

2.0.3

Disclosed:

Oct 16, 2025

CVE-2025-62009 on NVD →

The UPC/EAN/GTIN Code Generator plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to, and including, 2.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which c...

CVSS:

8.1

Affected:

up to 2.0.2

Fixed in:

2.0.3

Disclosed:

Aug 25, 2025

CVE-2025-53588 on NVD →

The UPC/EAN/GTIN Code Generator plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.0.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to update plugin settings.

CVSS:

4.3

Affected:

up to 2.0.2

Fixed in:

2.0.3

Disclosed:

Apr 1, 2025

CVE-2025-31878 on NVD →