Wholesale Pricing Woocommerce Vulnerabilities

The Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,...

CVSS:

6.4

Affected:

up to 4.0.2

Fixed in:

4.0.3

Disclosed:

Mar 31, 2025

CVE-2025-31598 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Quantity Dynamic Pricing & Bulk Discounts for WooCommerce allows Stored XSS. This issue affects Quantity Dynamic Pricing & Bulk Discounts for WooCommerce: from n/a through 4.0.0.

Affected:

up to 4.0.1

Fix:

No patched version reported

Disclosed:

Mar 31, 2025

CVE-2025-31598 on NVD →

[en] The Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.8.0. This makes it possible for unauthenticated attackers to inject arbi...

Affected:

up to 3.8.1

Fixed in:

3.8.1

Disclosed:

Oct 4, 2024

CVE-2024-9384 on NVD →

The Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.8.0. This makes it possible for unauthenticated attackers to inject arbitrary...

CVSS:

6.1

Affected:

up to 3.8.0

Fixed in:

3.8.1

Disclosed:

Oct 3, 2024

CVE-2024-9384 on NVD →