Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Active Products Tables for WooCommerce. Use constructor to create tables  1.0.6.6

  • Severity: medium-risk
  • Status: Fixed
  • Publication: February 17, 2025

A plugin called Active Products Tables for WooCommerce in WordPress is at risk for a type of cyber attack called Reflected Cross-Site Scripting. This is because it does not properly filter and protect user input. This means that someone could potentially insert harmful code into the plugin, which could then be executed on a webpage if a user clicks on a certain link. This vulnerability exists in all versions of the plugin up to and including 1.0.6.6.

Detected in:

Active Products Tables for WooCommerce. Use constructor to create tables  fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.