CVE-2024-0797

CVE-2024-0797 affects the WordPress plugin “Active Products Tables for WooCommerce” (Profit-Products-Tables-for-WooCommerce). The vulnerability is due to missing capability checks in several functions, allowing subscribers (and higher) to access admin-only functionality in all versions up to and ...

CVE-2024-0796

CVE-2024-0796: Active Products Tables for WooCommerce (Profit–Products–Tables for WooCommerce) is vulnerable to Cross-Site Request Forgery due to missing/incorrect nonce validation on AJAX actions. Affected versions are up to and including 1.0.6.1; exploitation requires an unauthenticated attacke...