Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: woobewoo Component: Product Table Clear all filters
TI-2024-12278 CVE-2024-13234 · GHSA-6mgf-94xq-664g

Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection

Priority MEDIUM 49

The Product Table by WBW plugin for WordPress is vulnerable to SQL Injection via the 'additionalCondition' parameter in all versions up to, and including, 2.1.2 due to insufficient escaping on the user supplied parameter…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2025-01-23 No fix listed CWE-89
TI-2024-29507 CVE-2024-43918 · GHSA-76xq-3xgg-jfmh

WordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability

Priority MEDIUM 52

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01474 Published 2024-08-29 No fix listed CWE-89