219 matches found
WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting
WordPress Easy Pricing Tables plugin before 3.2.1 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before reflecting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled. id:...
AP Pricing Tables Lite <= 1.1.6 - SQL Injection
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins. id: CVE-2023-0900 info: name: AP Pricing Tables Lite = 1.1.6 - SQL Injection author: r3Y3r53 severity: high description: ...
WordPress Pricing Table WordPress Plugin plugin < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish vulnerability
Contributor+ Arbitrary Post Clone and Publish vulnerability discovered by RIA Labs in WordPress Plugin Easy Pricing Tables versions 4.1.3...
CVE-2026-111947 Easy Pricing Tables < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table Duplication
The Pricing Table WordPress Plugin WordPress plugin before 4.1.3 does not perform authorisation checks when duplicating a legacy pricing table, allowing users with the contributor role and above to clone and publish any post or page on the site, including private and draft content belonging to...
CVE-2026-111947 Easy Pricing Tables < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table Duplication
The Pricing Table WordPress Plugin WordPress plugin before 4.1.3 does not perform authorisation checks when duplicating a legacy pricing table, allowing users with the contributor role and above to clone and publish any post or page on the site, including private and draft content belonging to...
CVE-2026-111947
The Pricing Table WordPress Plugin (specifically the Easy Pricing Tables plugin) is vulnerable in versions before 4.1.3 due to a lack of authorisation checks when duplicating a legacy pricing table. This flaw allows users with a contributor role or higher to clone and publish any post or page on ...
CVE-2026-94115
Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...
CVE-2026-94115 WordPress Easy Pricing Tables plugin <= 4.1.2 - SQL Injection vulnerability
Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...
CVE-2026-94115
The WordPress Easy Pricing Tables plugin versions
CVE-2026-94115 WordPress Easy Pricing Tables plugin <= 4.1.2 - SQL Injection vulnerability
Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...
EUVD-2026-89836
Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...
WordPress Easy Pricing Tables plugin <= 4.1.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Easy Pricing Tables versions = 4.1.2...
CVE-2026-94115: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...
PT-2026-103168
Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...
WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting Detection
WordPress Easy Pricing Tables plugin before 3.2.1 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before reflecting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled. !/usr/bin/env...
CVE-2026-6808
The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
WordPress Pricing Tables for WP plugin <= 1.1.0 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Julian Chibuike Nwadinobi Wackydawg - streamio in WordPress Plugin Pricing Tables for WP versions = 1.1.0...
EUVD-2026-29410
The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-6808
The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-6808
The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...