Approved changes feed: RSS · Atom

cpe:2.3:a:wp-table_reloaded_project:wp-table_reloaded:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWp Table Reloaded Project (a374bfe2-cf2e-5732-b41a-04d5627ad6c3)
ProductWp Table Reloaded (bc87e224-9034-52c1-8bb5-d520235f9c6d)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/tobiasbg/wp-table-reloaded purl2cpe 2026-06-01 10:11:58.232649
pkg:github/wpplugins/wp-table-reloaded purl2cpe 2026-06-01 10:11:58.232651

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4491 vulnerable 2026-06-08 05:51:59.601932 WP Table Reloaded <= 1.9.4 - Contributor+ Stored XSS
The WP-Table Reloaded WordPress plugin through 1.9.4 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins.
Published: 2023-01-09T22:13:32.929Z
Updated: 2025-04-09T18:59:47.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1463 vulnerable 2026-06-08 05:03:54.059076 Details available
Cross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likely that CVE-2013-1463 will be REJECTed.
Published: 2013-02-07T02:00:00.000Z
Updated: 2024-08-06T15:04:49.038Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.