Lucene search

K

4 matches found

CVE
CVE
added 2023/05/24 12:15 a.m.50 views

CVE-2023-2494

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a role ...

8.8CVSS8.2AI score0.00101EPSS
CVE
CVE
added 2023/05/24 12:15 a.m.46 views

CVE-2023-2496

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability check on the 'validate_upload' function in versions up to, and including, 3.3.19. This makes it possible for authenticated attackers with a ro...

7.5CVSS8.1AI score0.02821EPSS
CVE
CVE
added 2023/05/24 12:15 a.m.44 views

CVE-2023-2498

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.19 due to insufficient input sanitization and output escaping. This makes it possible for contributor-level attackers to inject...

6.4CVSS5.3AI score0.00109EPSS
CVE
CVE
added 2023/05/25 12:15 a.m.37 views

CVE-2023-2500

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.3.19 via deserialization of untrusted input from the 'go_pricing' shortcode 'data' parameter. This allows authenticated attackers, with subscriber-leve...

8.8CVSS8.8AI score0.00443EPSS