PULSE
EN VIVO23señales / 24h
EN
FEED
ransomaurora reclama a GILDE Handwerk Macrander GmbH & Co. KG · DE · Manufacturingransomaurora reclama a US Installation Group, Inc. · US · Manufacturingransomincransom reclama a pushidrosal.id · ID · Otherransomincransom reclama a lccgroup.com · PH · Professional Servicesransomincransom reclama a https://geleximco.vn/ · VN · Manufacturingransomincransom reclama a clintonhealthaccess.org · US · Healthcareransomincransom reclama a Oleoductos del Valle · AR · Energy & Utilitiesransomsafepay reclama a pradotuylaw.com · US · Professional Servicesransomsafepay reclama a naskdoorinc.com · US · Manufacturingransomsafepay reclama a new-point.it · IT · Technologyransomsafepay reclama a simonrack.com · ES · Manufacturingransomsafepay reclama a hanan-hov.co.il · IL · Otherransomanubis reclama a BLACKBURN'S · US · Healthcareransomanubis reclama a Cameron Regional Medical Center · US · Healthcareransomaurora reclama a GILDE Handwerk Macrander GmbH & Co. KG · DE · Manufacturingransomaurora reclama a US Installation Group, Inc. · US · Manufacturingransomincransom reclama a pushidrosal.id · ID · Otherransomincransom reclama a lccgroup.com · PH · Professional Servicesransomincransom reclama a https://geleximco.vn/ · VN · Manufacturingransomincransom reclama a clintonhealthaccess.org · US · Healthcareransomincransom reclama a Oleoductos del Valle · AR · Energy & Utilitiesransomsafepay reclama a pradotuylaw.com · US · Professional Servicesransomsafepay reclama a naskdoorinc.com · US · Manufacturingransomsafepay reclama a new-point.it · IT · Technologyransomsafepay reclama a simonrack.com · ES · Manufacturingransomsafepay reclama a hanan-hov.co.il · IL · Otherransomanubis reclama a BLACKBURN'S · US · Healthcareransomanubis reclama a Cameron Regional Medical Center · US · Healthcare
← Todos los CVEs
CVE Watch1 ago 2026

CVE-2026-13725

The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user capabilities on one

CVSS

—

Sin CVSS

EPSS

0.2%

p7

KEV

—

Exploit Today

2

0-100

Publicado: 1 ago 2026 · Última mod.: 1 ago 2026

EPSS · 30d
0.2%EPSS · 30 días0.2%
2026-08-012026-08-02
Descripción técnica

The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user capabilities on one of its AJAX actions and reflects unsanitised user input in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send a crafted request.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.