Approved changes feed: RSS · Atom

cpe:2.3:a:realmag777:active_products_tables_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRealmag777 (367987aa-9884-5ea5-b6ea-639a360f4171)
ProductActive Products Tables For Woocommerce (75f4e890-35e7-5331-a879-a038ead9d07e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42761 vulnerable 2026-06-03 15:25:01.513695 WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Blind SQL Injection.This issue affects Active Products Tables for WooCommerce: from n/a through <= 1.0.9.
Published: 2026-05-27T09:49:06.102Z
Updated: 2026-05-27T10:47:15.749Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42727 vulnerable 2026-06-03 15:25:01.463851 WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Blind SQL Injection.This issue affects Active Products Tables for WooCommerce: from n/a through <= 1.0.8.
Published: 2026-05-27T09:49:03.996Z
Updated: 2026-05-27T10:54:04.749Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32450 vulnerable 2026-06-03 15:20:43.058286 WordPress Active Products Tables for WooCommerce plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows DOM-Based XSS.This issue affects Active Products Tables for WooCommerce: from n/a through <= 1.0.7.
Published: 2026-03-13T11:42:21.288Z
Updated: 2026-04-29T09:51:59.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48266 vulnerable 2026-06-03 15:01:34.351858 WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.8 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Stored XSS.This issue affects Active Products Tables for WooCommerce: from n/a through <= 1.0.6.8.
Published: 2025-05-19T14:45:16.146Z
Updated: 2026-05-12T00:18:47.495Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35730 vulnerable 2026-06-03 14:56:02.894306 WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.3 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in realmag777 Active Products Tables for WooCommerce allows Reflected XSS.This issue affects Active Products Tables for WooCommerce: from n/a through 1.0.6.3.
Published: 2024-06-08T12:54:55.808Z
Updated: 2026-04-28T16:09:54.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32691 vulnerable 2026-06-03 14:55:47.758513 WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.2 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in realmag777 Active Products Tables for WooCommerce.This issue affects Active Products Tables for WooCommerce: from n/a through 1.0.6.2.
Published: 2024-04-22T10:32:33.505Z
Updated: 2026-04-28T16:09:39.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10959 vulnerable 2026-06-03 14:54:13.065466 Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smth
HIGH (7.3)
The The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to arbitrary shortcode execution via woot_get_smth AJAX action in all versions up to, and including, 1.0.6.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Published: 2024-12-10T11:09:12.310Z
Updated: 2026-04-08T17:31:29.392Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.