Arbitrary Shortcode Execution Vulnerability in WooCommerce Product Table Lite Plugin

CVE-2024-10899

What is CVE-2024-10899?

The vulnerability in the WooCommerce Product Table Lite plugin for WordPress affects all versions up to 3.8.6, enabling arbitrary shortcode execution due to improper validation of user-input values. This flaw allows unauthenticated attackers to execute malicious shortcodes, potentially leading to unauthorized actions on affected websites. Additionally, the same vulnerability exposes the 'id' parameter to reflected Cross-Site Scripting attacks, further compromising the security of the WordPress installation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References