Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Pricing Tables - Cross-Site Scripting (XSS) (CVE-2024-13582)
The Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wdo_simple_pricing_table_free' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Pricing Tables
CVE-2024-13582
Risk Score
Threat Entry
Updated 2026-06-17
Pricing Tables WordPress Plugin - Cross-Site Scripting (XSS) (CVE-2024-8323)
The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Pricing Tables WordPress Plugin
CVE-2024-8323
Risk Score
Threat Entry
Updated 2026-06-17
Pricing Tables - Cross-Site Scripting (XSS) (CVE-2024-8871)
The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.2.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
PLUGIN
Pricing Tables
CVE-2024-8871
Risk Score
Threat Entry
Updated 2026-06-17
Pricing Tables - Cross-Site Scripting (XSS) (CVE-2022-4654)
The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
PLUGIN
Pricing Tables
CVE-2022-4654
Risk Score
Threat Entry
Updated 2026-06-17
Pricing Tables - Cross-Site Scripting (XSS) (CVE-2022-1904)
The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific setting is enabled, leading to a Reflected Cross-Site Scripting
PLUGIN
Pricing Tables
CVE-2022-1904
Risk Score
Threat Entry
Updated 2026-06-17
Pricing Tables - Cross-Site Request Forgery (CSRF) (CVE-2021-25098)
The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash
PLUGIN
Pricing Tables
CVE-2021-25098
Risk Score