CVE-2024-1333

The Responsive Pricing Table WordPress plugin before 5.1.11 does not validate and escape some of its Pricing Table options before outputting them back in a page/post where the related shortcode is embed, which could allow users with the author role and above to perform Stored Cross-Site Scripting...

CVE-2023-4810

CVE-2023-4810 affects the WordPress plugin Responsive Pricing Table (pre-5.1.8). The issue is failure to sanitise/escape certain settings, enabling a stored Cross‑Site Scripting (XSS) attack by high‑privilege users (e.g., admins), including when unfiltered_html is disallowed (such as multisite). ...

CVE-2022-46855

CVE-2022-46855 is a Stored Cross-Site Scripting (XSS) in the WP Darko Responsive Pricing Table plugin, affected versions ≤ 5.1.6. The root cause is insufficient sanitization/escaping of the fields.title parameter, which can allow a contributor (and higher) to inject JavaScript. The vulnerability’...