WordPress Plugin Vulnerabilities

Product Table for WooCommerce by CodeAstrology (wooproducttable.com) < 3.5.2 - Information Exposure

Description

The Product Table for WooCommerce by CodeAstrology (wooproducttable.com) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1 via the var_dump_table parameter. This makes it possible for unauthenticated attackers var data.

Affects Plugins

Plugin icon
woo-product-table
Fixed in 3.5.2

References

CVE
CVE-2024-10813
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/e67f680a-8942-45fa-8458-a27c78045aa1

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Nathan (calysteon)
Verified
No
WPVDB ID
a6dc5e48-fa30-426c-a0a1-d36362510650

Timeline

Publicly Published
2024-11-22 (about 1 year ago)
Added
2024-11-22 (about 1 year ago)
Last Updated
2024-11-25 (about 1 year ago)

Other

Published
Title
Published
2025-08-14
Title
Modernize <= 3.4.0 - Missing Authorization
Published
2025-04-01
Title
Ni WooCommerce Cost Of Goods < 3.2.9 - Missing Authorization
Published
2025-01-15
Title
My Tickets < 2.0.10 - Missing Authorization
Published
2026-03-23
Title
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment < 2.6.1 - Missing Authorization
Published
2025-04-24
Title
WS Form LITE – Drag & Drop Contact Form Builder for WordPress < 1.10.36 - Missing Authorization to Unauthenticated Sensitive Information Exposure