Cross-Site Request Forgery in ThemeHigh Dynamic Pricing by ThemeHigh
CVE-2025-49077
4.3MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 6 June 2025
What is CVE-2025-49077?
A Cross-Site Request Forgery (CSRF) vulnerability in ThemeHigh's Dynamic Pricing and Discount Rules plugin can allow attackers to perform unauthorized actions on behalf of users without their consent. This security flaw affects all versions from an earlier release up to 2.2.9, posing significant risks to users who may have outdated installations. Implementing necessary security measures is crucial to safeguard your WordPress site against potential exploits.
Affected Version(s)
Dynamic Pricing and Discount Rules <= 2.2.9