The popular Dynamic Pricing and Discounts plugin from Envato can be exploited by unauthenticated attackers.
Source: Threadpost