Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Advanced Dynamic Pricing for WooCommerce 4.1.5

  • Severity: medium-risk
  • Status: Fixed
  • Publication: February 17, 2023

The Advanced Dynamic Pricing for WooCommerce plugin for WordPress has a security vulnerability in versions up to, and including, 4.1.5. This vulnerability allows unauthenticated attackers to send a special link to a site administrator which, if clicked, could cause the administrator to unintentionally take an action. This is because the plugin does not have enough security measures in place to validate and protect against malicious requests.

Detected in:

Advanced Dynamic Pricing and Discount Rules for WooCommerce fixed vulnerable versions:
Advanced Dynamic Pricing for WooCommerce fixed vulnerable versions: >= * <= 4.1.5
Discount rules and advanced dynamic pricing for WooCommerce fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.