CVE Database /
CVE-2025-39453
CVE · Medium
CVE-2025-39453 — Advanced Dynamic Pricing and Discount Rules for WooCommerce [advanced-dynamic-pricing-for-woocommerce] < 4.9.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-39453
|
Advanced Dynamic Pricing and Discount Rules for WooCommerce [advanced-dynamic-pricing-for-woocommerce] < 4.9.5 |
Cross-Site Request Forgery (CSRF) |
Medium
4.3
|
< 4.9.5
|
4.9.5 |
2025-04-17 |
—
|
CVE-2025-39453
The Advanced Dynamic Pricing for WooCommerce WordPress plugin has a security flaw that allows malicious individuals to manipulate plugin settings without proper authorization. This issue arises from inadequate validation of a specific function, allowing unverified users to influence plugin configurations by exploiting the trust of site administrators through deceitful means. The vulnerability affects all versions up to and including 4.9.3.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings