High 7.2
2025-12-30< 1.1.14
CVE-2025-14509
Minimum safe version
1.1.14
Update to 1.1.14 or later to address 4 fixable vulnerabilities
CVE-2025-14509
Lucky Wheel for WooCommerce – Spin a Sale <= 1.0.10 - Cross-Site Scripting
WordPress Lucky Wheel for WooCommerce – Spin a Sale plugin <= 1.0.10 - Reflected Cross-Site Scripting (XSS) vulnerability
WordPress Lucky Wheel for WooCommerce – Spin a Sale plugin <= 1.0.10 - Stored Cross-Site Scripting (XSS) vulnerability