CVE-2025-47544

ÉLEVÉE 7.2CVE-2025-47544 · Published 07/05/2025 · updated 17/06/2026

En bref

CVE-2025-47544 est une vulnérabilité ÉLEVÉE (CVSS 7.2) touchant dynamic pricing with discount rules for woocommerce (acowebs).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.48%, plus élevée que 41.4% des vulnérabilités.
Correctif : mettre à jour vers 4.5.9 ou plus récent.

Package	Affected versions	Patched versions
dynamic pricing with discount rules for woocommerce acowebs	`< 4.5.9`	`4.5.9`

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a through <= 4.5.8.

References

patchstack.com/database/Wordpress/Plugin/aco-woo-dynamic-pricing/vulnerability/wordpress-dynamic-pricing-with-discount-rules-for-woocommerce-4-5-8-sql-injection-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free