CVE-2024-1333

The Responsive Pricing Table WordPress plugin (versions before 5.1.11 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to a failure to validate and escape certain Pricing Table options before they are outputted in pages or posts where the shortcode is embedded. This flaw could allow users...

CVE-2023-4810

CVE-2023-4810 affects the WordPress plugin Responsive Pricing Table (pre-5.1.8). The issue is failure to sanitise/escape certain settings, enabling a stored Cross‑Site Scripting (XSS) attack by high‑privilege users (e.g., admins), including when unfiltered_html is disallowed (such as multisite). ...

CVE-2022-46855

CVE-2022-46855 is a Stored Cross-Site Scripting (XSS) in the WP Darko Responsive Pricing Table plugin, affected versions ≤ 5.1.6. The root cause is insufficient sanitization/escaping of the fields.title parameter, which can allow a contributor (and higher) to inject JavaScript. The vulnerability’...