7.5
High
CVE-2026-78137 The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its…
Description
The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthenticated actions, allowing unauthenticated attackers to add a product to the cart at an arbitrary, attacker-chosen price that carries through to the checkout total when the BOGO offer feature is enabled.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| StoreGrowth 2.1 | earliest → < 2.1.2 | 2.1.2 |