Lucene search
+L

118 matches found

Positive Technologies
Positive Technologies
added 2023/06/05 12:0 a.m.8 views

PT-2023-16602 · WordPress · Pricing Table Builder

Name of the Vulnerable Software and Affected Versions: Pricing Table Builder WordPress plugin versions 1.1.6 and earlier Description: The issue is related to a SQL injection problem. It occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can...

7.2CVSS9.7AI score0.03229EPSS
Exploits2References4
OSV
OSV
added 2023/05/03 3:15 p.m.3 views

CVE-2022-46852

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Table Builder plugin = 1.4.6 versions...

4.8CVSS5.8AI score0.00396EPSS
Exploits0References1
NVD
NVD
added 2023/05/03 3:15 p.m.27 views

CVE-2022-46852

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Table Builder plugin = 1.4.6 versions...

5.9CVSS5.4AI score0.00396EPSS
Exploits0References1
Prion
Prion
added 2023/05/03 3:15 p.m.15 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Table Builder plugin = 1.4.6 versions...

4.3CVSS4.8AI score0.00396EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/05/03 2:4 p.m.50 views

CVE-2022-46852

CVE-2022-46852 : WP Table Builder plugin versions

5.9CVSS4.9AI score0.00396EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/03 2:4 p.m.35 views

CVE-2022-46852 WordPress WP Table Builder – WordPress Table Plugin Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Table Builder plugin = 1.4.6 versions...

5.9CVSS5.5AI score0.00396EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/03 2:4 p.m.7 views

CVE-2022-46852 WordPress WP Table Builder – WordPress Table Plugin Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Table Builder plugin = 1.4.6 versions...

5.9CVSS5.8AI score0.00396EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/05/03 12:0 a.m.4 views

WordPress plugin WP Table Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.3AI score0.00396EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/03 12:0 a.m.5 views

PT-2023-15077 · WordPress · Wp Table Builder

Name of the Vulnerable Software and Affected Versions: WP Table Builder plugin versions prior to 1.4.7 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This allows for malicious script execution. Recommendations: F...

5.9CVSS5.2AI score0.00396EPSS
Exploits0References3
WPVulnDB
WPVulnDB
added 2023/02/20 12:0 a.m.14 views

WP Table Builder < 1.4.7 - Admin+ Stored XSS

The plugin does not sanitise and escape some of parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS4.8AI score0.00396EPSS
Exploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/21 7:15 p.m.4 views

CVE-2022-0640

The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.00853EPSS
Exploits2References3
OSV
OSV
added 2022/03/21 7:15 p.m.3 views

CVE-2022-0640

The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.00853EPSS
Exploits2References2
CVE
CVE
added 2022/03/21 6:55 p.m.97 views

CVE-2022-0640

CVE-2022-0640 affects the WordPress plugin Pricing Table Builder (AP Pricing Tables Lite) prior to version 1.1.5. The vulnerability stems from insufficient sanitization/escaping of the postid parameter when it is echoed back on an admin page, enabling a Reflected Cross-Site Scripting (XSS) attack...

6.1CVSS6.2AI score0.00853EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2022/03/21 6:55 p.m.23 views

CVE-2022-0640 AP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site Scripting

The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.4AI score0.00853EPSS
Exploits2References2
CNNVD
CNNVD
added 2022/03/21 12:0 a.m.8 views

WordPress plugin Pricing Table Builder 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in...

6.1CVSS5.9AI score0.00853EPSS
Exploits2References3
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.15 views

WordPress WordPress Table Builder – TableGenie plugin <= 1.0.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WordPress Table Builder – TableGenie plugin versions = 1.0.5. Solution No patched version available...

4.4AI score
Exploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2021/09/27 12:0 a.m.11 views

WP Table Builder < 1.3.10 - Reflected Cross-Site Scripting

The plugin does not escape a page parameter before outputting it back in an admin dashboard page, leading to a Reflected Cross-Site Scripting issue PoC...

0.9AI score
Exploits0Affected Software1
wpexploit
wpexploit
added 2021/09/27 12:0 a.m.539 views

WP Table Builder < 1.3.10 - Reflected Cross-Site Scripting

The plugin does not escape a page parameter before outputting it back in an admin dashboard page, leading to a Reflected Cross-Site Scripting issue alert/XSS/' /...

0.2AI score
Exploits0
Rows per page
Query Builder