CVE-2023-40559: Multidots Dynamic Pricing And Discount Rules For Woocommerce

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin <= 2.4.0 versions.

Affected products

• Multidots Dynamic Pricing And Discount Rules For Woocommerce: before 2.4.1 (fixed in 2.4.1)

Published 2023-10-04. Last modified 2026-06-17.