WordPress Plugin Vulnerabilities

WooCommerce Product Table Lite < 3.9.0 - Missing Authorization

Description

The WooCommerce Product Table Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.8.7. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Affects Plugins

Plugin icon
wc-product-table-lite
Fixed in 3.9.0

References

CVE
CVE-2025-24596
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/81f00661-1dfa-426f-b775-aaa4712d34bc

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Kévin Mosbahi (Mika)
Verified
No
WPVDB ID
46e6d7ea-4f26-456a-82e4-38f45039c885

Timeline

Publicly Published
2025-01-24 (about 1 year ago)
Added
2025-01-28 (about 1 year ago)
Last Updated
2025-01-28 (about 1 year ago)

Other

Published
Title
Published
2025-12-15
Title
Simple Link Directory < 8.8.4 - Missing Authorization
Published
2026-04-15
Title
Riaxe Product Customizer <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Options Update to Privilege Escalation via 'install-imprint' AJAX Action
Published
2026-02-15
Title
Video Conferencing with Zoom < 4.6.7 - Missing Authorization
Published
2024-08-16
Title
Presto Player < 3.0.3 - Missing Authorization
Published
2025-01-24
Title
uDesign < 4.11.3 - Missing Authorization