CVE-2025-8198 - CVE House

Back to Database

Status published High CVE-2025-8198

MinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price Manipulation

7.5 CVSS

Vulnerability Description

The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.9.0. This is due to an insufficient check on quantity values when changing quantities in the cart. This makes it possible for unauthenticated attackers to add items to the cart and adjust the quantity to a fractional amount, causing the price to change based on the fractional amount. The vulnerability cannot be exploited if WooCommerce version 9.8.2+ is installed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8198

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Vijay

References

More from ThemeMove

View All →

WordPress Unicamp theme <= 2.2.2 - SQL Injection vulnerability

WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability

WordPress EduMall theme <= 4.4.7 - Local File Inclusion vulnerability

WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability

WordPress EduMall Theme < 4.4.5 - Local File Inclusion Vulnerability

Affected Vendor

ThemeMove

View all reports →

Affected Software

MinimogWP – The High Converting eCommerce WordPress Theme

Vulnerable Versions:

0

Timeline

Official Publish: July 26th, 2025

Last Modified: April 8th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.