Read the docs

Granth

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Granth records in CISA KEV

No Granth vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Go Pricing 4 records MEDIUM

Records

4 records

TI-2023-02347 CVE-2023-2500 · GHSA-f3cc-48j6-g7cc

Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Authenticated (Subscriber+) PHP Object Injection

Priority MEDIUM 42

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.3.19 via deserialization of untrusted input from the 'go_pricing' shortc…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00884 Published 2023-05-24 No fix listed CWE-502
TI-2023-02341 CVE-2023-2494 · GHSA-m5q7-cf66-2jc8

Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Missing Authorization to Limited Privilege Granting

Priority LOW 38

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in versions up to, and inc…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00369 Published 2023-05-23 No fix listed CWE-862
TI-2023-02343 CVE-2023-2496 · GHSA-6c5h-fjmf-jpg3

Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Improper Authorization to Arbitrary File Upload

Priority LOW 36

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability check on the 'validate_upload' function in versions up to, and…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00794 Published 2023-05-23 No fix listed CWE-285
TI-2023-02345 CVE-2023-2498 · GHSA-h6p4-275g-j84p

Cross-site scripting in Granth Go Pricing - WordPress Responsive Pricing Tables

Priority LOW 28

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.19 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00365 Published 2023-05-23 No fix listed CWE-79
Open these records in search →