CVE-2024-2959

CVE-2024-2959 affects the SVS Pricing Tables WordPress plugin. It is a Cross-Site Request Forgery (CSRF) vulnerability in savePricingTable() due to missing/incorrect nonce validation, present in all versions up to 1.0.4. This can allow unauthenticated attackers to create or edit pricing tables by...

CVE-2024-2960

CVE-2024-2960 refers to a CSRF vulnerability in the WordPress plugin SVS Pricing Tables (versions up to and including 1.0.4). The issue arises from missing or incorrect nonce validation in the deletePricingTable() function, enabling unauthenticated attackers to delete pricing tables by inducing a...

CVE-2024-2958

CVE-2024-2958 affects the SVS Pricing Tables WordPress plugin. It is a Stored Cross-Site Scripting vulnerability in pricing table settings present in all versions up to 1.0.4. Exploitation requires admin-level credentials and affects multisite installations or sites where unfiltered_html is disab...