CVE-2022-1020: Missing Authorization

The Product Table for WooCommerce wooproducttable WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wptadminupdatenoticeoption AJAX action available to both unauthenticated and authenticated users, as well as does not validate the callback parameter, allowing...

PT-2022-13595

Name of the Vulnerable Software and Affected Versions The Product Table for WooCommerce wooproducttable versions prior to 3.1.2 Description The issue concerns the lack of authorization and CSRF checks in the wpt admin update notice option AJAX action, which is accessible to both unauthenticated a...