PT-2025-44598

Name of the Vulnerable Software and Affected Versions WPC Name Your Price for WooCommerce plugin for WordPress versions up to and including 2.1.9 Description The WPC Name Your Price for WooCommerce plugin for WordPress is susceptible to unauthorized price alteration. This occurs because the plugi...

CVE-2023-4252 EventPrime <= 3.2.9 - Booking Pricing Bypass

The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment...

EventPrime < 3.3.6 - Booking Pricing Bypass

Description The plugin specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment. PoC Create an Event, noting its ID. Add a ticket type to the Event, ensuring that the price is not zero. As a logged-in user, go through the process of paying...