WordPress Plugin Supsystic Pricing Table 1.8.7 - Multiple Vulnerabilities

Exploit Title: WordPress Plugin Supsystic Pricing Table 1.8.7 - Multiple Vulnerabilities Date: 24/07/2020 Exploit Author: Erik David Martin Vendor Homepage: https://supsystic.com/ Software Link: https://downloads.wordpress.org/plugin/pricing-table-by-supsystic.1.8.7.zip Version: 1.8.7 and 1.8.6...

WordPress pricing-table-by-supsystic insecure permissions vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security issue exists in WordPress pricing-table-by-supsystic prior to version 1.8.2, which stems from the...

CVE-2020-9392

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or...

Code injection

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or...

CVE-2020-9392

The CVE-2020-9392 entry concerns the WordPress plugin Pricing Table by Supsystic prior to version 1.8.2. The vulnerability stems from missing permission checks on three endpoints (ImportJSONTable, createFromTpl, getJSONExportTable), allowing unauthenticated users to retrieve pricing table data, c...

CVE-2020-9392: Incorrect Default Permissions

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or...

WordPress Pricing Table by Supsystic Plugin < 1.8.2 Multiple Vulnerabilities

The WordPress plugin Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

Pricing Table by Supsystic Cross-Site Request Forgery Vulnerability

WordPress plugin Pricing Table by Supsystic is used to create pricing tables easily. A cross-site request forgery vulnerability exists in Pricing Table by Supsystic versions prior to 1.8.2. No details of the vulnerability are provided at this time...

Pricing Table by Supsystic Cross-Site Scripting Vulnerability

WordPress plugin Pricing Table by Supsystic is used to create pricing tables easily. A cross-site scripting vulnerability exists in Pricing Table by Supsystic versions prior to 1.8.2. No details of the vulnerability are provided at this time...

CVE-2020-9393

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS...

CVE-2020-9393

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS...

CVE-2020-9394

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF...

CVE-2020-9394

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF...

CVE-2020-9393

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS...

CVE-2020-9394

CVE-2020-9394 corresponds to a CSRF vulnerability in the WordPress plugin Pricing Table by Supsystic, versions prior to 1.8.2. The issue enables cross-site requests to perform unauthorized actions within the plugin’s AJAX/endpoints (e.g., ImportJSONTable, createFromTpl, getJSONExportTable) due to...

CVE-2020-9393

CVE-2020-9393 concerns the WordPress plugin Pricing Table by Supsystic (versions before 1.8.2). A cross-site scripting vulnerability exists in this plugin, allowing an attacker to inject/execute arbitrary scripts via user-supplied input. The NVD and multiple feeds corroborate that the issue is ti...

CVE-2020-9393

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS...

Pricing Table by Supsystic < 1.8.2 - Unauthenticated Stored XSS

No permission check on the ImportJSONTable endpoint allows for malicious javascript to be injected by unauthenticated users. PoC...

CVE-2020-9393: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS...

Pricing Table by Supsystic < 1.8.1 - Cross-Site Request Forgery to XSS and Setting Changes

CSRF can be exploited against any of the functionalities in the Pricing Table by Supsystic WordPress plugin in vulnerable versions. One example:...