Approved changes feed: RSS · Atom

cpe:2.3:a:wpclever:wpc_name_your_price_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpclever (c57d919d-58d9-59c4-b847-aa59b14dc3fa)
ProductWpc Name Your Price For Woocommerce (81d2983a-aa5f-50af-b843-fdabb7eb3690)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12115 vulnerable 2026-06-03 14:58:43.826723 WPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alteration
HIGH (7.5)
The WPC Name Your Price for WooCommerce plugin for WordPress is vulnerable to unauthorized price alteration in all versions up to, and including, 2.1.9. This is due to the plugin not disabling the ability to name a custom price when it has been specifically disabled for a product. This makes it possible for unauthenticated attackers to purchase products at prices less than they should be able to.
Published: 2025-10-31T09:27:21.530Z
Updated: 2026-04-08T17:33:31.563Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.