CVE-2024-13472

CVE-2024-13472 affects the WordPress plugin “WooCommerce Product Table Lite” (versions up to and including 3.9.4). The issue allows unauthenticated attackers to achieve arbitrary shortcode execution due to improper validation before running do_shortcode, and the same sc_attrs parameter is vulnera...

CVE-2024-10899

CVE-2024-10899 affects WordPress plugin WooCommerce Product Table Lite up to version 3.8.6. It allows unauthenticated attackers to execute arbitrary shortcodes due to unvalidated input before do_shortcode, and the same id parameter is vulnerable to Reflected XSS. The remediation is to upgrade to ...

CVE-2024-43128

CVE-2024-43128 in WooCommerce Product Table Lite (WC Product Table Lite) is an improper generation of code vulnerability. Affected versions are WC Product Table Lite from 0 through 3.5.1, with an unauthenticated code/shortcode execution path. The issue is resolved by upgrading to version 3.5.1 (t...

CVE-2024-6458

CVE-2024-6458 affects the WooCommerce Product Table Lite plugin for WordPress. Root cause: missing capability check in wcpt_presets__duplicate_preset_to_table allows authenticated users with subscriber+ to modify post titles. Impact: unauthorized post title changes and potential stored XSS when t...

CVE-2025-24596

CVE-2025-24596 : WordPress WooCommerce Product Table Lite (WC Product Table Lite) has a Missing Authorization vulnerability affecting versions up to 3.8.7, described as Broken Access Control. The issue is publicly discussed in multiple sources (WordPress plugin vulnerability reports and Patchstac...