7.1 High

CVE-2026-13725 The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or…

Description

The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user capabilities on one of its AJAX actions and reflects unsanitised user input in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send a crafted request.

Affected products and versions

Product	Affected versions	Fixed in
Dynamic Pricing With Discount Rules for WooCommerce 5.0	earliest → < 5.0.0	5.0.0

Do you use Dynamic Pricing With Discount Rules for WooCommerce?

Track this CVE Watch Dynamic Pricing With Discount Rules for WooCommerce Check my SBOMs

www.cveye.io/en/cve/CVE-2026-13725

Timeline

Published August 1, 2026
Last modified August 5, 2026

References

wpscan.com wpscan.com

Track this CVE