MinimogWP WordPress Theme Price Manipulation Vulnerability

A vulnerability allowing price manipulation has been identified in the MinimogWP eCommerce WordPress theme, affecting all versions through 3.9.0. The issue arises from inadequate validation of quantity values when items are added to the cart. This flaw enables unauthenticated users to modify the quantity of items to fractional amounts, thereby altering the total price based on these adjustments. Notably, this vulnerability is not exploitable if WooCommerce version 9.8.2 or later is active.

Impact

Exploitation of this vulnerability allows for unauthorized price manipulation in the shopping cart, potentially leading to financial loss or abuse of the eCommerce system.

Remediation

Users are advised to update the MinimogWP theme to version 3.9.1 or later.