CVE-2026-13725

UNKNOWN 0.0

Dynamic Pricing With Discount Rules for WooCommerce < 5.0.0 - Reflected XSS via wdpAjax

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user capabilities on one of its AJAX actions and reflects unsanitised user input in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send a crafted request.

Vendor	unknown
Product	dynamic pricing with discount rules for woocommerce
Published	Aug 1, 2026

Stay Ahead of the Next One

Get instant alerts for unknown dynamic pricing with discount rules for woocommerce

Be the first to know when new unknown vulnerabilities affecting unknown dynamic pricing with discount rules for woocommerce are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Dynamic Pricing With Discount Rules for WooCommerce

0 < 5.0.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/5e3786de-4b4d-4da2-b129-7b0fef90a386/

Credits

João Ramos Maciel WPScan