CVE-2026-6808

The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-6808 Pricing Tables for WP <= 1.1.0 - Reflected Cross-Site Scripting via 'page' Parameter

The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2024-8323: Improper Neutralization of Input During Web Page Generation

The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

PT-2023-14957

Name of the Vulnerable Software and Affected Versions The Pricing Tables WordPress Plugin versions prior to 3.2.3 Description The issue is related to a Stored Cross-Site Scripting attack. It occurs because the plugin does not validate and escape one of its shortcode attributes. This could allow...

CVE-2022-4654: Undefined Security Weakness

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

PT-2022-14182

Name of the Vulnerable Software and Affected Versions Pricing Tables WordPress Plugin version prior to 3.2.1 Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs when a specific setting is enabled, allowing an attacker to inject malicious code through a parameter tha...

CVE-2022-1904: Improper Neutralization of Input During Web Page Generation

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled, leading to a Reflected Cross-Site Scripting...

CVE-2021-25098: Cross-Site Request Forgery (CSRF)

The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash...

PT-2022-9653

Name of the Vulnerable Software and Affected Versions The Pricing Tables WordPress Plugin versions prior to 3.1.3 Description The issue allows attackers to make a logged-in admin remove arbitrary posts from the blog via a CSRF attack. The removed posts will be put in the trash. This is possible...