Skip to content
OpenAdvisories

Vendor

javmah

4 known vulnerabilities.

Products

WPGSI: Spreadsheet Integration 3 Woocommerce Customers Order History 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-1916

    WPGSI: Spreadsheet Integration <= 3.8.3 - Missing Authorization to Unauthenticated Arbitrary Post Creation and Deletion via Forged Base64 Token

    The WPGSI: Spreadsheet Integration plugin for WordPress is vulnerable to unauthorized modification and loss of data due to missing capability checks and an insecure authentication mechanism on the `wpgsi_callBackFuncAccept` and `wpgsi_callBackFuncUpdate` REST…

    javmah WPGSI: Spreadsheet Integration Web / CMS