CVE-2022-1916

CVE-2022-1916 concerns the WordPress plugin “Active Products Tables for WooCommerce” (prior to v1.0.5). The vulnerability is a reflected cross-site scripting (XSS) flaw caused by the plugin not sanitizing/escaping a parameter before echoing it in the response of an AJAX action. This action is acc...

CVE-2023-51480

CVE-2023-51480 affects the WordPress plugin “Active Products Tables for WooCommerce” (Professional/Profit Products Tables). The vulnerability is a Cross‑Site Scripting (Stored XSS) due to improper neutralization of input during web page generation. It lists affected versions as

CVE-2024-10168

CVE-2024-10168 affects Active Products Tables for WooCommerce. Use constructor to create tables (WordPress plugin) and is vulnerable to Stored Cross-Site Scripting via the woot_button shortcode in all versions up to 1.0.6.4. Root cause: insufficient input sanitization and output escaping on user-...