Simple Shopping Cart Plugin up to 5.1.2 on WordPress Product Price product_tmp_two external control of assumed-immutable web parameter

Summaryinfo

A vulnerability, which was classified as critical, was found in Simple Shopping Cart Plugin up to 5.1.2 on WordPress. The impacted element is an unknown function of the component Product Price Handler. Such manipulation of the argument product_tmp_two leads to an unknown weakness. This vulnerability is uniquely identified as CVE-2025-3530. The attack can be launched remotely. No exploit exists.

Detailsinfo

A vulnerability was found in Simple Shopping Cart Plugin up to 5.1.2 on WordPress. It has been rated as critical. Affected by this issue is some unknown functionality of the component Product Price Handler. The manipulation of the argument product_tmp_two with an unknown input leads to a unknown weakness. Using CWE to declare the problem leads to CWE-472. The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such as hidden form fields. Impacted is integrity. CVE summarizes:

The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plugin uses the parameter 'product_tmp_two' for computing a security hash against price tampering while using 'wspsc_product' to display the product, allowing an unauthenticated attacker to substitute details from a cheaper product and bypass payment for a more expensive item.

The advisory is shared for download at wordfence.com. This vulnerability is handled as CVE-2025-3530 since 04/11/2025. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 04/23/2025).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• WordPress Plugin

Name

• Simple Shopping Cart Plugin

Version

• 5.1.0
• 5.1.1
• 5.1.2

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion