Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Advanced Dynamic Pricing for WooCommerce 4.1.5

  • Severity: medium-risk
  • Status: Fixed
  • Publication: February 17, 2023

The Advanced Dynamic Pricing for WooCommerce plugin for WordPress is vulnerable to malicious changes to its advanced pricing rules. This plugin, used by websites running on WordPress, could be manipulated by an authorized user with at least ‘Subscriber’ level access. The vulnerability exists in versions of the plugin up to 4.1.5, where there is a missing capability check on the migrateCommonToProductOnly function.

Detected in:

Advanced Dynamic Pricing and Discount Rules for WooCommerce fixed vulnerable versions:
Advanced Dynamic Pricing for WooCommerce fixed vulnerable versions: >= * <= 4.1.5
Discount rules and advanced dynamic pricing for WooCommerce fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.