86 matches found
CVE-2020-9392
The CVE-2020-9392 entry concerns the WordPress plugin Pricing Table by Supsystic prior to version 1.8.2. The vulnerability stems from missing permission checks on three endpoints (ImportJSONTable, createFromTpl, getJSONExportTable), allowing unauthenticated users to retrieve pricing table data, c...
CVE-2020-9394
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF...
CVE-2020-9393
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS...
CVE-2020-9394
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF...
WordPress Easy Table Plugin <= 1.5.2 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
CVE-2007-2483
Directory traversal vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the wpPATH parameter...