WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object Injection
CVE-2023-51505

10CRITICAL

Key Information:

Vendor
WordPress
Status
Active Products Tables For WooCommerce. Professional Products Tables For WooCommerce Store
Vendor
CVE Published:
29 December 2023

Summary

A deserialization vulnerability has been identified in the Active Products Tables for WooCommerce by realmag777, affecting versions from n/a to 1.0.6. This vulnerability allows attackers to exploit untrusted data, potentially leading to unauthorized access and manipulation of the application's data. Users and administrators are advised to update to the latest version and implement necessary security measures to mitigate potential risks.

Affected Version(s)

Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6

References

https://patchstack.com/database/vulnerability/profit-prod...
vdb-entry

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LVT-tholv2k (Patchstack Alliance)
.