CVE-2024-0617: Quanticedgesolutions Category Discount Woocommerce

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The Category Discount Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpcd_save_discount() function in all versions up to, and including, 4.12. This makes it possible for unauthenticated attackers to modify product category discounts that could lead to loss of revenue.

Affected products

• Quanticedgesolutions Category Discount Woocommerce: before 4.13 (fixed in 4.13)

Published 2024-01-25. Last modified 2026-06-17.