What is GHSA-m4wv-xhrh-3qf6?

GHSA-m4wv-xhrh-3qf6 is a security advisory published by GitHub Security Advisories with High severity. The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not...

Which CVE IDs does GHSA-m4wv-xhrh-3qf6 cover?

GHSA-m4wv-xhrh-3qf6 covers the following CVE IDs: CVE-2026-13725. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m4wv-xhrh-3qf6?

GHSA-m4wv-xhrh-3qf6 has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

GHSA-m4wv-xhrh-3qf6HighCVSS 7.1

The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not...

Vendor

GitHub Security Advisories

Published

August 1, 2026

Last Modified

August 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-13725 →

📋 Description

The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user capabilities on one of its AJAX actions and reflects unsanitised user input in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send a crafted request.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-13725
https://wpscan.com/vulnerability/5e3786de-4b4d-4da2-b129-7b0fef90a386
https://github.com/advisories/GHSA-m4wv-xhrh-3qf6