Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: fatcatapps Component: Easy Pricing Tables Clear all filters
TI-2024-07717 CVE-2024-8323 · GHSA-fwmf-6rqq-97g9

Cross-site scripting in fatcatapps Pricing Table WordPress Plugin – Easy Pricing Tables

Priority LOW 28

The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient i…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-11-06 No fix listed CWE-79
TI-2022-01764 CVE-2022-1904 · GHSA-5gj7-9vg9-w5rc

Easy Pricing Tables < 3.2.1 - Reflected Cross-Site-Scripting

Priority LOW 30

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0148 Published 2022-06-27 Fixed in 3.2.1 CWE-79
TI-2021-07376 CVE-2021-25098 · GHSA-42m8-7fjc-3h2p

Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF

Priority LOW 29

The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, w…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00531 Published 2022-03-07 Fixed in 3.1.3 CWE-352