CVE-2025-39378

Name of the Vulnerable Software and Affected Versions Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions through 2.4.37

Description The issue is related to Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion.

Recommendations For versions through 2.4.37, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.