PT-2025-30960 · WordPress+1 · Minimogwp+1

Vijay · Publicado 2025-07-26 · Atualizado 2025-07-26 · CVE-2025-8198

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions MinimogWP – The High Converting eCommerce WordPress Theme versions prior to 3.9.1

Description The MinimogWP – The High Converting eCommerce WordPress Theme for WordPress is susceptible to price manipulation due to an insufficient check on quantity values when modifying quantities in the cart. This allows unauthenticated attackers to add items to the cart and adjust the quantity to a fractional amount, leading to price changes based on the fractional amount. The issue is mitigated when WooCommerce version 9.8.2 or later is installed.

Recommendations Update MinimogWP – The High Converting eCommerce WordPress Theme to version 3.9.1 or later. Install WooCommerce version 9.8.2 or later.

Correção

Enumeração de Fraquezas

CWE-472

Identificadores relacionados

CVE-2025-8198

Produtos afetados

Minimogwp

Woocommerce

Referências · 6

• https://twitter.com/VulmonFeeds/status/1949033324598481029 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-8198 · Nota de Segurança
• https://twitter.com/CVEnew/status/1948985943412572217 · Publicação no Twitter
• https://twitter.com/marcin_brz81183/status/1949006501093196100 · Publicação no Twitter
• https://changelog.thememove.com/minimog-wp · Nota
• https://wordfence.com/threat-intel/vulnerabilities/id/cfea0427-78dc-4151-864a-63b6761fc294?source=cve · Nota