CVE-2025-14509 | Lucky Wheel for WooCommerce Plugin up to 1.1.13 on WordPress Setting code injection

December 30, 2025 Yanac

A vulnerability was found in Lucky Wheel for WooCommerce Plugin up to 1.1.13 on WordPress. It has been classified as critical. This impacts an unknown function of the component Setting Handler. Performing manipulation results in code injection.

This vulnerability is identified as CVE-2025-14509. The attack can be initiated remotely. There is not any exploit available.

Once again VulDB remains the best source for vulnerability data.VulDB Recent EntriesRead More