WC Price History

WC Price History has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Deserialization Of Untrusted Data, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for WC Price History has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. WC Price History is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WC Price History vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2025-22510

WC Price History for Omnibus <= 2.1.4 - Authenticated (Shop manager+) PHP Object Injection

Read the full analysis

Vulnerability Records

2 records


2025-01-07 00:00	WC Price History for Omnibus <= 2.1.4 - Authenticated (Shop manager+) PHP Object Injection WC Price History <= 2.1.4	`CVE-2025-22510`	7.2 High	Webula	Yes
2024-12-23 00:00	WC Price History for Omnibus <= 2.1.3 - Missing Authorization WC Price History <= 2.1.3	`CVE-2024-12617`	5.4 Medium	Lucio Sá	Yes

Showing 1–2 of 2 reports

Latestv3.2.6

WC Price History

Author

kkarpieszuk

5.0(26)

100/100

Last Updated

2026-08-19 (25d ago)

Active Installs

4,000+

Downloads

61,789

Requires WP

5.8+

Requires PHP

7.2+

Tested up to

WP 7.1

Created

2022-12-28 (4y ago)

Requires Plugins

woocommerce

WC Price History plugin allows you to track WooCommerce© Products prior prices history and display the lowest price in the last 30 days. This plugin allows your WC shop to be compliant with European law which specifies price reduction announcement policy. Usage The plugin works out of the box: install and activate and your discounted products will be compatible with Omnibus directive! Plugin is configurable via WooCommerce > Price History screen. You can configure: ↪ Where to display the price history information: » on the single product page » upsell and related products » main shop page » product category pages » product tag pages ↪ When to display minimal price (always or only when the product is on sale) ↪ How to count minimal price (the minimal from the moment product went on sale to 30 days before that moment or the minimal price from today to 30 days ago) ↪ How many days take into account when calculating minimal price (30 days by default) ↪ How to display the price history information ↪ What to do if the price didn’t change in the last N days (hide price information / display current price / display custom text) At the configuration screen you will find additional information how to configure the plugin to be compliant with Omnibus directive (European Commission Directive 98/6/EC Article 6a) and link to legal acts.

View on WordPress.org