Threats tagged 'ghsa-m4wv-xhrh-3qf6'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-13725Dynamic Pricing With Discount Rules for WooCommerce (WordPress plugin) · Cross-Site Scripting (XSS) High7.1EPSS 0.3%2026-08-01CVE Database V5CVE-2026-13725 The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user capabilities on one of its AJAX actions and reflects unsanitised user input in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send a crafted request. EPSS 0.3%Vulnerability CWE-79 #ghsa-m4wv-xhrh-3qf6	CVE Database V5	2026-08-01

Page 1 of 1