PT-2025-44598 · Unknown+1 · Woocommerce+1

Published 2025-10-31 · Updated 2025-10-31 · CVE-2025-12115

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions WPC Name Your Price for WooCommerce plugin for WordPress versions up to and including 2.1.9

Description The WPC Name Your Price for WooCommerce plugin for WordPress is susceptible to unauthorized price alteration. This occurs because the plugin does not prevent users from entering a custom price even when this feature is disabled for a specific product. This allows unauthenticated attackers to purchase products at reduced prices.

Recommendations Update the WPC Name Your Price for WooCommerce plugin to a version later than 2.1.9.

Fix

Weakness Enumeration

CWE-602

Related Identifiers

CVE-2025-12115

Affected Products

Wpc Name Your Price For Woocommerce

Woocommerce

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-12115 · Security Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3386310%40wpc-name-your-price&new=3386310%40wpc-name-your-price&sfp_email=&sfph_mail= · Note
• https://t.me/cveNotify/141094 · Telegram Post
• https://twitter.com/RedPacketSec/status/1984275620818211058 · Twitter Post
• https://twitter.com/CVEnew/status/1984211888146981198 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/f64bc3c4-da89-4470-8353-d490f8bec408?source=cve · Note
• https://twitter.com/VulmonFeeds/status/1984229382752194782 · Twitter Post