CVE-2025-12398: Improper Neutralization of Input During Web Page Generation

The Product Table for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchkey' parameter in all versions up to, and including, 5.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

PT-2025-43335

Name of the Vulnerable Software and Affected Versions acowebs Product Table For WooCommerce versions through 1.2.4 Description The software contains a flaw related to the deserialization of untrusted data. This issue impacts the Product Table For WooCommerce product. The deserialization process...

CVE-2025-62008: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce.This issue affects Product Table For WooCommerce: from n/a through = 1.2.4...

CVE-2025-22638: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce allows Stored XSS.This issue affects Product Table For WooCommerce: from n/a through = 1.2.3...

PT-2025-13263

Name of the Vulnerable Software and Affected Versions Acowebs Product Table For WooCommerce versions 1.2.3 and earlier Description The issue affects the Acowebs Product Table For WooCommerce, allowing Stored XSS due to improper neutralization of input during web page generation. Recommendations F...

CVE-2025-22307

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saiful Islam Product Table for WooCommerce woo-product-table allows Reflected XSS.This issue affects Product Table for WooCommerce: from n/a through = 4.0.3...

CVE-2025-22307: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saiful Islam Product Table for WooCommerce woo-product-table allows Reflected XSS.This issue affects Product Table for WooCommerce: from n/a through = 4.0.3...

PT-2025-4422

Name of the Vulnerable Software and Affected Versions Product Table for WooCommerce versions n/a through 3.5.6 Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

CVE-2024-10813: Missing Authorization

The Product Table for WooCommerce by CodeAstrology wooproducttable.com plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1 via the vardumptable parameter. This makes it possible for unauthenticated attackers var data...

PT-2022-13595

Name of the Vulnerable Software and Affected Versions The Product Table for WooCommerce wooproducttable versions prior to 3.1.2 Description The issue concerns the lack of authorization and CSRF checks in the wpt admin update notice option AJAX action, which is accessible to both unauthenticated a...

CVE-2022-1020: Missing Authorization

The Product Table for WooCommerce wooproducttable WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wptadminupdatenoticeoption AJAX action available to both unauthenticated and authenticated users, as well as does not validate the callback parameter, allowing...