Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Stylishpricelist Component: Stylish Price List Clear all filters
TI-2024-07192 CVE-2024-7758 · GHSA-37c5-cj42-grq7

Stylish Price List < 7.1.8 - Contributor+ Stored XSS

Priority MEDIUM 55

The Stylish Price List WordPress plugin before 7.1.8 does not sanitise and escape some of its settings, which could allow high privilege users of contributor and above to perform Stored Cross-Site Scripting attacks even…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 7.1.8 CWE-79
TI-2024-09700 CVE-2024-10472 · GHSA-c993-hrcm-4cp8

Stylish Price List < 7.1.12 - Contributor+ Stored XSS

Priority MEDIUM 60

The Stylish Price List WordPress plugin before 7.1.12 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00323 Published 2025-03-25 Fixed in 7.1.12 CWE-79
TI-2023-28320 CVE-2023-51673 · GHSA-9frx-f993-wf86

WordPress Stylish Price List Plugin <= 7.0.17 is vulnerable to Broken Access Control

Priority MEDIUM 42

Cross-Site Request Forgery (CSRF) vulnerability in Designful Stylish Price List – Price Table Builder & QR Code Restaurant Menu.This issue affects Stylish Price List – Price Table Builder & QR Code Restaurant Menu: from…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00249 Published 2024-01-05 No fix listed CWE-352
TI-2021-07052 CVE-2021-24770 · GHSA-mqx9-j68h-8466

Stylish Price List < 6.9.1 - Subscriber+ Arbitrary Image Upload

Priority LOW 30

The Stylish Price List WordPress plugin before 6.9.1 does not perform capability checks in its spl_upload_ser_img AJAX action (available to authenticated users), which could allow any authenticated users, such as subscri…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00852 Published 2021-11-01 Fixed in 6.9.1 CWE-863
TI-2021-07039 CVE-2021-24757 · GHSA-gv86-wf87-753x

Stylish Price List < 6.9.0 - Unauthenticated Arbitrary Image Upload

Priority LOW 26

The Stylish Price List WordPress plugin before 6.9.0 does not perform capability checks in its spl_upload_ser_img AJAX action (available to both unauthenticated and authenticated users), which could allow unauthenticated…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01054 Published 2021-11-01 Fixed in 6.9.0 CWE-863