CVE-2025-39453

Summary

CVE-2025-39453 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Advanced Dynamic Pricing for WooCommerce plugin, from version n/a through 4.9.3. Hackers can exploit this issue to perform unauthorized actions on affected websites, such as changing pricing rules or making unintended transactions. The CSRF vulnerability occurs due to insufficient input validation, allowing malicious requests to be sent on behalf of an authenticated user. Website owners using this plugin are advised to update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.