Medium · 4.3 CVE-2025-48128 EUVD-2025-15518GHSA-qpvp-c873-3p8q

WordPress Sharespine Woocommerce Connector plugin <= 4.7.55 - Broken Access Control Vulnerability

Published May 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Sharespine Product: Sharespine Woocommerce Connector Category: Web / CMS

Description

Missing Authorization vulnerability in Sharespine Sharespine Woocommerce Connector sharespine-woocommerce-connector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sharespine Woocommerce Connector: from n/a through <= 4.7.55.

Affected products

Vendor	Product	Affected	Fixed
Sharespine	Sharespine Woocommerce Connector	≤ 4.7.55	—

References

https://patchstack.com/database/Wordpress/Plugin/sharespine-woocommerce-connector/vulnerability/wordpress-sharespine-woocommerce-connector-4-7-55-broken-access-control-vulnerability?_s_id=cve vdb-entry