Product Table

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:woobewoo:product_table:*:*:*:*:pro:wordpress:*:*

part: a version: * update: *

VendorWoobewoo (0b879a1d-e77c-5146-bc64-232cd146e219)
ProductProduct Table (3fab45d8-145c-5ae5-ab05-147f0ae5133a)
Edition*
Language*
Software editionpro
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-43918 vulnerable 2026-06-08 06:45:53.217546 WordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability
CRITICAL (10)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4.
Published: 2024-08-29T14:49:51.828Z
Updated: 2026-04-28T16:10:13.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13234 vulnerable 2026-06-08 06:25:37.034349 Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection
HIGH (7.5)
The Product Table by WBW plugin for WordPress is vulnerable to SQL Injection via the 'additionalCondition' parameter in all versions up to, and including, 2.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Published: 2025-01-23T11:13:27.688Z
Updated: 2026-04-08T16:58:19.205Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.