Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-40559 EUVD-2023-45130GHSA-5r4h-96j4-r5ff

WordPress WooCommerce Dynamic Pricing and Discount Rules Plugin <= 2.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Published Oct 4, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: theDotstore Product: Dynamic Pricing and Discount Rules for WooCommerce Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin <= 2.4.0 versions.

Affected products

VendorProductAffectedFixed
theDotstore Dynamic Pricing and Discount Rules for WooCommerce ≤ 2.4.0 —

References