The $0 Shopping Cart: How a Popular Shopify App Let Shoppers Write Their Own Prices
A price-manipulation vulnerability in MageWorx Advanced Product Options lets shoppers change option prices to $0.00. Here’s the issue, how it was found, and how to fix it.