Price Manipulation Vulnerability in MinimogWP eCommerce Theme
CVE-2025-8198

7.5HIGH

What is CVE-2025-8198?

The MinimogWP eCommerce theme is susceptible to a price manipulation vulnerability due to inadequate validation of quantity values when items are added to the shopping cart. This flaw allows unauthenticated attackers to modify product quantities to fractional values, influencing the calculated price. Users can mitigate this issue by ensuring their WooCommerce installation is updated to version 9.8.2 or later, which addresses this security concern.

Affected Version(s)

MinimogWP – The High Converting eCommerce WordPress Theme * <= 3.9.0

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vijay
.