WordPress ARPrice <3.6.1 - SQL Injection

WordPress ARPrice plugin prior to 3.6.1 contains a SQL injection vulnerability. It fails to properly sanitize and escape user supplied POST data before being inserted in an SQL statement and executed via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or...

WordPress Pricing Deals for WooCommerce <=2.0.2.02 - SQL Injection

WordPress Pricing Deals for WooCommerce plugin through 2.0.2.02 contains a SQL injection vulnerability. The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or...

WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting

WordPress Easy Pricing Tables plugin before 3.2.1 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before reflecting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled. id:...

AP Pricing Tables Lite <= 1.1.6 - SQL Injection

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins. id: CVE-2023-0900 info: name: AP Pricing Tables Lite = 1.1.6 - SQL Injection author: r3Y3r53 severity: high description: ...

WP Pricing Table - Reflected XSS

WP Pricing Table WordPress plugin = 1.1 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute scripts in the context of high privilege users, exploit requires attacker to craft malicious URL. id: CVE-2024-13628 info: name: WP Pricing Table -...

Responsive Pricing Table <= 5.1.12 - Cross-Site Scripting

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'planicons' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...

hdwebmobile-formula-pricing

HDWebmobile Formula Pricing Price a product from customer-entered numbers using a formula -- evaluated safely, never with PHP's eval. WordPress.org: https://wordpress.org/plugins/hdwebmobile-formula-pricing/ Requires: WordPress 6.9+, WooCommerce, PHP 7.4+ License: GPLv2 or later Description...

CVE-2026-24416

CVE-2026-24416: OpenSTAManager 아티클 가격 책정 모듈의 시간 기반 블라인드 SQL 인젝션 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2026-24416 심각도| 높음 보안 권고| 보안 권고 보기 발견자| Lukasz Rybak 영향을 받는 제품 devcode-it/openstamanager 버전: = 2.9.8 CWE 분류 CWE-89: SQL 명령에 사용되는 특수 요소의 부적절한 중화 'SQL 인젝션' 세부 정보 요약 OpenSTAManager v2.9.8의 아티클 가격 책정 모듈에 ...

CVE-2026-94115

Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...

CVE-2026-94115

The WordPress Easy Pricing Tables plugin versions

CVE-2026-94115 WordPress Easy Pricing Tables plugin <= 4.1.2 - SQL Injection vulnerability

Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...

EUVD-2026-89836

Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...

CVE-2026-94115 WordPress Easy Pricing Tables plugin <= 4.1.2 - SQL Injection vulnerability

Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...

WordPress Easy Pricing Tables plugin <= 4.1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Easy Pricing Tables versions = 4.1.2...

CVE-2025-6440

CVE-2025-6440 — WordPress WooCommerce Dynamic Pricing & Discounts Plugin Overview This repository contains a Python proof-of-concept PoC script for testing an unauthenticated file upload vulnerability affecting the WordPress WooCommerce Dynamic Pricing & Discounts plugin. ⚠️ This project is...

CVE-2026-6083

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint ' /inventory/configuration/pricing-tiers' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

PT-2026-98411

Name of the Vulnerable Software and Affected Versions StockAgile affected versions not specified Description Stored Cross-Site Scripting XSS exists in the API and management panel. The issue occurs on the server side at the REST endpoint '/inventory/configuration/pricing-tiers', where malicious...

CVE-2026-93508

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX action, allowing authenticated users with Subscriber-level access and above to create, modify and delete arbitrary post meta on any post, including WooCommerce products, regardless ...

CVE-2026-93508

The WC Fields Factory WordPress plugin, in versions prior to 4.1.11 , is vulnerable to unauthorized access because it fails to properly restrict its field-management AJAX action . This flaw allows authenticated users with Subscriber-level access or higher to perform unauthorized actions, includin...

PT-2026-97198

Name of the Vulnerable Software and Affected Versions WC Fields Factory WordPress plugin versions prior to 4.1.11 Description Insufficient access restrictions on the field-management AJAX action allow authenticated users with Subscriber-level permissions or higher to create, modify, and delete...