SQL Injection Vulnerability in Dynamic Pricing Plugin for WooCommerce by Acowebs

CVE-2025-47544

What is CVE-2025-47544?

The Dynamic Pricing With Discount Rules for WooCommerce plugin by Acowebs is susceptible to an SQL Injection vulnerability, which allows attackers to manipulate database queries executed by the application. This may enable unauthorized access to sensitive data and the potential for malicious exploitation. The vulnerability affects versions of the plugin from n/a through 4.5.8, allowing for Blind SQL Injection techniques to be leveraged. Website administrators are recommended to update their plugins to mitigate risks associated with this security flaw.

References