CVE-2022-1020

CVE-2022-1020 affects the WordPress WooCommerce Product Table plugin prior to 3.1.2. The wpt_admin_update_notice_option AJAX action lacks proper authorization and CSRF checks and does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary functions with none or ...

CVE-2024-10813

CVE-2024-10813 affects the WordPress plugin “Product Table for WooCommerce by CodeAstrology” (wooproducttable.com). The vulnerability is an information-exposure flaw in which unauthenticated attackers can access sensitive data via the var_dump_table parameter. It affects all versions up to and in...