220 matches found
CVE-2024-43918
WordPress WBW Product Table Pro = 1.9.4 - 인증되지 않은 임의 SQL 실행을 통한 원격 코드 실행 CVE-2024-43918 WBW Product Table Pro WordPress 플러그인은 최대 1.9.4 버전까지 함수에 대한 적절한 권한 확인이 누락되어 인증되지 않은 임의 SQL 실행에 취약합니다. 이로 인해 인증되지 않은 공격자가 민감한 데이터를 탈취하거나 취약한 사이트에 대한 높은 권한을 획득하는 데 사용할 수 있는 임의 SQL 쿼리를 실행할 수 있습니다. 더 많은 WordPress...
CVE-2026-96814
Unauthenticated Cross Site Scripting XSS in WooCommerce Product Table Lite = 5.6.7 versions...
CVE-2026-96814 WordPress WooCommerce Product Table Lite plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WooCommerce Product Table Lite = 5.6.7 versions...
EUVD-2026-89867
Unauthenticated Cross Site Scripting XSS in WooCommerce Product Table Lite = 5.6.7 versions...
CVE-2026-96814
The WooCommerce Product Table Lite WordPress plugin (versions
CVE-2026-96814 WordPress WooCommerce Product Table Lite plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WooCommerce Product Table Lite = 5.6.7 versions...
CVE-2026-96814: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WooCommerce Product Table Lite = 5.6.7 versions...
WordPress WooCommerce Product Table Lite plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Asim Alshaya in WordPress Plugin WooCommerce Product Table Lite versions = 5.6.7...
WordPress Product Table & List Builder For WooCommerce plugin <= 5.6.0 - Unauthenticated CSS Injection via 'laptop_scroll_offset' Parameter vulnerability
Unauthenticated CSS Injection via 'laptopscrolloffset' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WooCommerce Product Table Lite versions = 5.6.0...
CVE-2026-15441
The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptopscrolloffset' shortcode attribute exposed through the unauthenticated wcptajax AJAX handler. The handler is registered for wpajaxnoprivwcptajax, JSON-decodes...
CVE-2026-15441 Product Table & List Builder For WooCommerce <= 5.6.0 - Unauthenticated CSS Injection via 'laptop_scroll_offset' Parameter
The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptopscrolloffset' shortcode attribute exposed through the unauthenticated wcptajax AJAX handler. The handler is registered for wpajaxnoprivwcptajax, JSON-decodes...
EUVD-2026-59861
The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptopscrolloffset' shortcode attribute exposed through the unauthenticated wcptajax AJAX handler. The handler is registered for wpajaxnoprivwcptajax, JSON-decodes...
CVE-2026-15441
The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptopscrolloffset' shortcode attribute exposed through the unauthenticated wcptajax AJAX handler. The handler is registered for wpajaxnoprivwcptajax, JSON-decodes...
CVE-2026-15441 Product Table & List Builder For WooCommerce <= 5.6.0 - Unauthenticated CSS Injection via 'laptop_scroll_offset' Parameter
The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptopscrolloffset' shortcode attribute exposed through the unauthenticated wcptajax AJAX handler. The handler is registered for wpajaxnoprivwcptajax, JSON-decodes...
CVE-2026-15441
The CVE-2026-15441 entry concerns the WC Product Table Lite WordPress plugin (versions up to 5.6.0). It is vulnerable to CSS Injection via the unauthenticated shortcode attribute laptop_scroll_offset passed through the wcpt_ajax() handler (wp_ajax_nopriv_wcpt_ajax). The handler JSON-decodes attac...
PT-2026-73090
Name of the Vulnerable Software and Affected Versions WC Product Table Lite versions prior to 5.6.1 Description An unauthenticated CSS Injection issue exists via the laptop scroll offset shortcode attribute. The wcpt ajax AJAX handler, registered for wp ajax nopriv wcpt ajax, processes...
CVE-2026-15441: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptopscrolloffset' shortcode attribute exposed through the unauthenticated wcptajax AJAX handler. The handler is registered for wpajaxnoprivwcptajax, JSON-decodes...
EUVD-2026-36923
Unauthenticated Cross Site Scripting XSS in WooCommerce Product Table Lite = 4.6.3 versions...