PT-2025-30960 · WordPress+1 · Minimogwp+1

Vijay · Published 2025-07-26 · Updated 2025-07-26 · CVE-2025-8198

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions MinimogWP – The High Converting eCommerce WordPress Theme versions prior to 3.9.1

Description The MinimogWP – The High Converting eCommerce WordPress Theme for WordPress is susceptible to price manipulation due to an insufficient check on quantity values when modifying quantities in the cart. This allows unauthenticated attackers to add items to the cart and adjust the quantity to a fractional amount, leading to price changes based on the fractional amount. The issue is mitigated when WooCommerce version 9.8.2 or later is installed.

Recommendations Update MinimogWP – The High Converting eCommerce WordPress Theme to version 3.9.1 or later. Install WooCommerce version 9.8.2 or later.

Fix

Weakness Enumeration

CWE-472

Related Identifiers

CVE-2025-8198

Affected Products

Minimogwp

Woocommerce

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-8198 · Security Note
• https://twitter.com/VulmonFeeds/status/1949033324598481029 · Twitter Post
• https://twitter.com/CVEnew/status/1948985943412572217 · Twitter Post
• https://twitter.com/marcin_brz81183/status/1949006501093196100 · Twitter Post
• https://changelog.thememove.com/minimog-wp · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/cfea0427-78dc-4151-864a-63b6761fc294?source=cve · Note