Selling Commander for WooCommerce – connector plugin
Selling Commander for WooCommerce – connector plugin has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Incorrect Privilege Assignment, behind 1 of the records (100%).
The one issue recorded for Selling Commander for WooCommerce – connector plugin has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by ch4r0n. Selling Commander for WooCommerce – connector plugin is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.
CVE-2025-60243Selling Commander for WooCommerce <= 1.2.46 - Unauthenticated Privilege Escalation
Read the full analysisVulnerability Records
Selling Commander for WooCommerce – connector plugin
Author
Holest Engineering
Bulk edit, manage, import, export your products with an ulitmale products managment platform SellingCommander. This plugin provides the REST connection between your WordPress/WooCommerce site and the SellingCommander SaaS platform. SellingCommander offers a unique GUI that enables you to seamlessly manage your product catalog. You can manage data online and there is also powefull import and import preview feature. WHAT IS THE SELLING COMMANDER? Selling Commander is an ULTIMATE bulk product manager tool. Compared to other solutions Selling Commander comes first, followed by 10 empty places, then come all the others. SellingCommander is a SaaS platform that is designed to give web sellers a unified command center from which they can manage their product data across multiple e-commerce platforms like WooCommerce, VirtueMart, Shopify, Open Cart, Google GCM, Facebook Mini, Amazon, eBay, ETSY … Different from other used tools for publishing product data on Google, Facebook and similar platforms, in this case, you can fine-tune what data goes where and how it is modified for the target platform. It can be used to fine-manage data on the main site and side selling channels like Google GCM, Facebook Mini, Amazon, eBay, ETSY … Also, it can be also used to synchronize product data with resalers. It can be also used for site-to-site data transfers or simply you can just use its powerful interface to manage your product catalog. Selling Commander offers a state-of-the-art user-friendly excel-like spreadsheet interface for all end-points it supports (Product Manager, Order Manager, B2B panel). Once loaded Selling Commander interface is very fast and locating data happens in a blink. For comparison, if you would export data of some massive catalog that glides when you manage it from the Selling Commander interface on-line in popular apps like MS Excel or Open Office it will be slow and maybe even crash because of high memory load. Each end-point manager has powerful filtering abilities – you can filter by anything, even calculated columns or columns that you connect to data added by other plugins/extensions. Each end-point manager has powerful data management abilities. You can virtually program your rule for mass price change. You can use mass Find/Replace, Append, and Prepend for any text field. You can export to CSV/XLSX. You can import from CSV/XSLX/ODS. Import even has a preview changes screen which is a unique feature among such online used tools. Docs & Support SellingCommander main website: SellingCommander site Tech forum: Holest Tech Froum Direct support: support@holest.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C