Extension WordPress

Vulnérabilités Go Pricing – WordPress Responsive Pricing Tables

Cette page rassemble les failles publiées pour Go Pricing – WordPress Responsive Pricing Tables, leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
0Critiques
4Avec correctif
8,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Go Pricing – WordPress Responsive Pricing Tables

4 fiches

CVE-2023-2500 Élevée · 8,8
Go Pricing – WordPress Responsive Pricing Tables

Go Pricing – WordPress Responsive Pricing Tables <= 3.3.19 – Authenticated (Subscriber+) PHP Object Injection

The Go Pricing – WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.3.19 via deserialization of untrusted input from the 'go_pricing' shortcode 'data' parameter. This allows authenticated…

Versions affectées

*-3.3.19

Correctif

3.4

Publication

23/05/2023

CVE-2023-2494 Moyenne · 4,6
Go Pricing – WordPress Responsive Pricing Tables

Go Pricing – WordPress Responsive Pricing Tables <= 3.3.19 – Missing Authorization to Limited Privilege Granting

The Go Pricing – WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in versions up to, and including, 3.3.19. This makes it…

Versions affectées

*-3.3.19

Correctif

3.4

Publication

23/05/2023

CVE-2023-2496 Élevée · 7,1
Go Pricing – WordPress Responsive Pricing Tables

Go Pricing – WordPress Responsive Pricing Tables <= 3.3.19 – Improper Authorization to Arbitrary File Upload

The Go Pricing – WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability check on the 'validate_upload' function in versions up to, and including, 3.3.19. This makes it…

Versions affectées

*-3.3.19

Correctif

3.4

Publication

23/05/2023

CVE-2023-2498 Moyenne · 6,4
Go Pricing – WordPress Responsive Pricing Tables

Go Pricing – WordPress Responsive Pricing Tables <= 3.3.19 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Go Pricing – WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.19 due to insufficient input sanitization and output escaping. This makes it possible…

Versions affectées

*-3.3.19

Correctif

3.4

Publication

23/05/2023

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités