Skip to content
OpenAdvisories
Critical · 9.9 CVE-2025-22782 EUVD-2025-2992GHSA-x3q9-c5xr-rhh8

WordPress WR Price List Manager For Woocommerce plugin <= 1.0.8 - Remote Code Execution (RCE) vulnerability

Published Jan 15, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Web Ready Now WR Price List Manager For Woocommerce wr-price-list-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects WR Price List Manager For Woocommerce: from n/a through <= 1.0.8.

Affected products

VendorProductAffectedFixed
Web Ready Now WR Price List Manager For Woocommerce ≤ 1.0.8 —

References