WordPress Plugin Vulnerabilities

Pricing Table < 2.3 - Cross-Site Request Forgery

Description

Lack of CSRF checks could allow attackers to make logged in users perform unwanted actions, such as arplite_import_export.

Affects Plugins

Plugin icon
arprice-responsive-pricing-table
Fixed in 2.3

References

CVE
CVE-2019-14679

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
4.3 (medium)

Miscellaneous

Verified
No
WPVDB ID
b1e2ab32-fe0b-4396-825f-34ee3b138626

Timeline

Publicly Published
2019-07-11 (about 6 years ago)
Added
2020-07-13 (about 5 years ago)
Last Updated
2020-07-15 (about 5 years ago)

Other

Published
Title
Published
2025-10-10
Title
Web Accessibility By accessiBe < 2.11 - Cross-Site Request Forgery
Published
2024-01-31
Title
Accessibility < 1.0.7 - Cross-Site Request Forgery
Published
2025-03-04
Title
I Am Gloria <= 1.1.4 - Cross-Site Request Forgery
Published
2025-04-09
Title
Codescar Radio Widget <= 0.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-03-24
Title
Typekit plugin for WordPress <= 1.2.3 - Cross-Site Request Forgery