CVE-2025-47544

HIGH 7.2CVE-2025-47544 · Published 07/05/2025 · updated 17/06/2026

In short

CVE-2025-47544 is a HIGH (CVSS 7.2) vulnerability affecting dynamic pricing with discount rules for woocommerce (acowebs).
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.4% of all vulnerabilities.
Fix: update to 4.5.9 or later.

Package	Affected versions	Patched versions
dynamic pricing with discount rules for woocommerce acowebs	`< 4.5.9`	`4.5.9`

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a through <= 4.5.8.

References

patchstack.com/database/Wordpress/Plugin/aco-woo-dynamic-pricing/vulnerability/wordpress-dynamic-pricing-with-discount-rules-for-woocommerce-4-5-8-sql-injection-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free