blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2025-12820

MEDIUM 5.3 CVSS 3.1
Published
December 20, 2025
Last modified
June 17, 2026
NVD status
Deferred
Reported by
contact@wpscan.com
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

The Pure WC Variation Swatches WordPress plugin through 1.1.7 does not have an authorization check when updating its settings, which could allow any authenticated users to update them.

Affected products and versions

  • Unknown Pure WC Variation Swatches — Up to and including 1.1.7

References

  • wpscan.com https://wpscan.com/vulnerability/36ccd54a-265a-44d5-b788-bc14446e3098/
  • nvd.nist.gov Official NVD record