Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Granth Clear all filters
TI-2023-02347 CVE-2023-2500 · GHSA-f3cc-48j6-g7cc

Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Authenticated (Subscriber+) PHP Object Injection

Priority MEDIUM 42

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.3.19 via deserialization of untrusted input from the 'go_pricing' shortc…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00884 Published 2023-05-24 No fix listed CWE-502
TI-2023-02341 CVE-2023-2494 · GHSA-m5q7-cf66-2jc8

Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Missing Authorization to Limited Privilege Granting

Priority LOW 38

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in versions up to, and inc…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00369 Published 2023-05-23 No fix listed CWE-862
TI-2023-02343 CVE-2023-2496 · GHSA-6c5h-fjmf-jpg3

Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Improper Authorization to Arbitrary File Upload

Priority LOW 36

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability check on the 'validate_upload' function in versions up to, and…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00794 Published 2023-05-23 No fix listed CWE-285
TI-2023-02345 CVE-2023-2498 · GHSA-h6p4-275g-j84p

Cross-site scripting in Granth Go Pricing - WordPress Responsive Pricing Tables

Priority LOW 28

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.19 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00365 Published 2023-05-23 No fix listed CWE-79