Arbitrary Shortcode Execution Vulnerability in WooCommerce Product Table Lite by WordPress

CVE-2024-13472

What is CVE-2024-13472?

The WooCommerce Product Table Lite plugin for WordPress is susceptible to arbitrary shortcode execution due to insufficient validation in handling user inputs. This vulnerability affects all plugin versions up to and including 3.9.4. An unauthenticated attacker can exploit the flaw by executing arbitrary shortcodes through the unvalidated 'sc_attrs' parameter. Additionally, this parameter is also prone to reflected cross-site scripting, which can further compromise the security of the affected site. It is critical for users of this plugin to implement necessary security measures to mitigate potential attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References