WPIntell

Source evidence

Security vulnerability alert

Dynamic Pricing and Discount Rules for WooCommerce · support · 2023-08-22T17:08:00+00:00

Dynamic Pricing and Discount Rules for WooCommerce plugin evidence original source source API
mixedsentiment
highseverity
0.94relevance
6replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

7 / 29 rows with source links

24.1% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

22 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
cfm168 resolved
Hello, I received following security risk warning: ————————————————————————— Input validation vulnerability in Dynamic Pricing and Discount Rules for WooCommerce 2.4.0 CVE-2023-40559 Severity: medium-risk Status: Open Publication: August 16, 2023 The WooCommerce Dynamic Pricing and Discount Rules plugin for WordPress has a security vulnerability in versions up to and including 2.4.0. This vulnerability is due to a lack of nonce validation on several functions, which means that malicious attackers can control the plugin’s settings by sending a false request, as long as they can trick a site ————————————————————————– I am running Woocomerce v8.0.2, WP6.3. Can you possible to fix it? Thanks in advance! Hello @cfm168 , Thanks for reaching. We are working on the security points and will release a new version with the security patch. Best Regards, Hitendra & Dotstore Team Any updates? Thanks for the followup. The testing is almost finished, and it will be released next week. Best, Hitendra & Dotstore Team Hello @cfm168 Please update the plugin version to resolve your query. Best Regards, Hitendra & Dotstore Team I already have the Version 2.4.1. Thanks! Thanks for the upgrade!

Comments

6 shown
Hitendra Chopda 2023-08-23T14:22:00+00:00

Hello @cfm168 , Thanks for reaching. We are working on the security points and will release a new version with the security patch. Best Regards, Hitendra & Dotstore Team

cfm168 2023-09-08T05:18:00+00:00

Any updates?

Hitendra Chopda 2023-09-08T05:32:00+00:00

Thanks for the followup. The testing is almost finished, and it will be released next week. Best, Hitendra & Dotstore Team

Hitendra Chopda 2023-09-18T06:14:00+00:00

Hello @cfm168 Please update the plugin version to resolve your query. Best Regards, Hitendra & Dotstore Team

cfm168 2023-09-18T15:01:00+00:00

I already have the Version 2.4.1. Thanks!

Hitendra Chopda 2023-09-21T06:12:00+00:00

Thanks for the upgrade!