WPC Name Your Price for WooCommerce vulnerabilities
We track 1 vulnerability in WPC Name Your Price for WooCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest WPC Name Your Price for WooCommerce vulnerabilities
- 7.5 High severity
WPC Name Your Price for WooCommerce: External Control of Assumed-Immutable Web Parameter
The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist for products configured in "Select" price mode, allowing an unauthenticated visitor to add such a product to the cart at an arbitrary value b