Please submit a private ticket if you need to share sensitive information, such as license details and admin credentials.

Okay
  Public Ticket #2522894
Name your price security issue
Closed

Comments

  • Itar started the conversation

    Hi,
    the "Name your price" plugin can be used to declare a minimum price on products. However, I was able to place a free order on any item, by simply manipulating the HTML on the page (inspect element). 
    TL;DR: You can change it to min="0" and get free stuff.

  •  767
    Janilyn replied

    Hi Itar,

    Thank you for reaching out to us. 

    We have received your request. I have written a note to our developers for investigating this issue soon. We will need some time to consider this and discuss the possibilities. 

    We'll keep you posted when there is something new. 

    Have a nice day. 

    Best regards.


    Janilyn T. - WPClever Support Agent

  • Dominik replied

    Hey Janilyn, why is the TIcket closed? Is this issue solved? I can still reproduce it and there is no validation for the price, so I can place an order (fortunately only to price 0.00 in total), but I can replace i.e. shipping costs with negative product prices.

    Do you have any solutions about this issue?


    Thank you for this nice plugin!

    Dominik