Lucene search
+L

276 matches found

CNNVD
CNNVD
added 2026/04/15 12:0 a.m.13 views

WordPress plugin Product Pricing Table by WooBeWoo 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.1CVSS5.9AI score0.00126EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:31 p.m.10 views

CVE-2023-4810

The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.6AI score0.00436EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:16 a.m.7 views

CVE-2025-15058

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tablecurrency' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5AI score0.00234EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:16 a.m.7 views

CVE-2025-13418

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'planicons' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...

6.4CVSS5AI score0.00598EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/07 12:16 p.m.7 views

CVE-2025-15058

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tablecurrency' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00234EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/07 12:16 p.m.8 views

CVE-2025-13418

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'planicons' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...

6.4CVSS0.00598EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/07 9:21 a.m.32 views

CVE-2025-15058 Responsive Pricing Table <= 5.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'table_currency'

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tablecurrency' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00234EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/07 9:21 a.m.31 views

CVE-2025-15058

CVE-2025-15058 corresponds to the Responsive Pricing Table plugin for WordPress, vulnerable to Stored Cross-Site Scripting via the table_currency parameter in all versions ≤ 5.1.12. Root cause: insufficient input sanitization and output escaping. Impact: authenticated attackers with Contributor+ ...

6.4CVSS4.7AI score0.00234EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/07 9:21 a.m.6 views

CVE-2025-15058 Responsive Pricing Table <= 5.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'table_currency'

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tablecurrency' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS4.7AI score0.00234EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/07 9:20 a.m.24 views

CVE-2025-13418

CVE-2025-13418 affects the WordPress plugin Responsive Pricing Table (versions

6.4CVSS4.7AI score0.00598EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/07 9:20 a.m.30 views

CVE-2025-13418 Responsive Pricing Table <= 5.1.12 - Authenticated (Author+) Stored Cross-Site Scripting

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'planicons' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...

6.4CVSS0.00598EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.8 views

PT-2026-1601

Name of the Vulnerable Software and Affected Versions Responsive Pricing Table plugin for WordPress versions prior to 5.1.13 Description The software is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. An authenticated attacker with Author-lev...

6.4CVSS5.5AI score0.00598EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.5 views

WordPress plugin Responsive Pricing Table 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.4CVSS5.8AI score0.00234EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.17 views

PT-2026-1640

Name of the Vulnerable Software and Affected Versions Responsive Pricing Table plugin for WordPress versions up to and including 5.1.12 Description The software contains a flaw due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level...

6.4CVSS6.4AI score0.00234EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.10 views

WordPress plugin Responsive Pricing Table 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.8AI score0.00598EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/01/06 11:20 p.m.10 views

WordPress Responsive Pricing Table plugin <= 5.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'table_currency' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'tablecurrency' vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Responsive Pricing Table versions = 5.1.12...

6.4CVSS5.6AI score0.00234EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/01/06 11:19 p.m.8 views

WordPress Responsive Pricing Table plugin <= 5.1.12 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Itthidej Aramsri Boeing777 in WordPress Plugin Responsive Pricing Table versions = 5.1.12...

6.4CVSS5.5AI score0.00598EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/14 8:45 a.m.13 views

CVE-2025-8780

The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Hero Header and Pricing Table widgets in all versions up to, and including, 3.9.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes i...

6.4CVSS5AI score0.00195EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/13 6:30 p.m.6 views

EUVD-2025-203243

The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Hero Header and Pricing Table widgets in all versions up to, and including, 3.9.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes i...

6.4CVSS4.7AI score0.00195EPSS
SaveExploits0References5
NVD
NVD
added 2025/12/13 4:16 p.m.10 views

CVE-2025-8780

The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Hero Header and Pricing Table widgets in all versions up to, and including, 3.9.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes i...

6.4CVSS0.00195EPSS
SaveExploits0References4
Rows per page
Query Builder