Threat Entry Updated 2025-03-27

CVE-2025-1514 - Profit Products Tables For Woocommerce Plugin

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to unauthorized filter calling due to insufficient restrictions on the get_smth() function in all versions up to, and including, 1.0.6.7. This makes it possible for unauthenticated attackers to call arbitrary WordPress filters with a single parameter.

PLUGIN Profit Products Tables For Woocommerce

CVE-2025-1514

HIGH CVSS 7.3 2025-03-26

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-02-21

CVE-2025-0864 - Profit Products Tables For Woocommerce Plugin

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcodes_set' parameter in all versions up to, and including, 1.0.6.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

PLUGIN Profit Products Tables For Woocommerce

CVE-2025-0864

MEDIUM CVSS 6.1 2025-02-18

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-12-10

CVE-2024-10959 - Profit Products Tables For Woocommerce Plugin

The The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to arbitrary shortcode execution via woot_get_smth AJAX action in all versions up to, and including, 1.0.6.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

PLUGIN Profit Products Tables For Woocommerce

CVE-2024-10959

HIGH CVSS 7.3 2024-12-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-08

CVE-2024-10168 - Profit Products Tables For Woocommerce Plugin

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's woot_button shortcode in all versions up to, and including, 1.0.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Profit Products Tables For Woocommerce

CVE-2024-10168

MEDIUM CVSS 6.4 2024-11-06

Risk Score

Open Full Technical Breakdown