WordPress Plugin Vulnerabilities

JustTables – WooCommerce Product Table < 1.5.0 - Cross-Site Request Forgery

Description

The plugin does not adequately protect against CSRF attacks, leading to potential unauthorized actions.

Affects Plugins

Plugin icon
just-tables
Fixed in 1.5.0

References

CVE
CVE-2023-23803
URL
https://patchstack.com/database/vulnerability/just-tables/wordpress-justtables-woocommerce-product-table-plugin-1-4-9-cross-site-request-forgery-csrf-vulnerability

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
Lana Codes
Verified
No
WPVDB ID
df2b2ead-c2a6-46ed-8960-322c9767f6cb

Timeline

Publicly Published
2023-03-30 (about 3 years ago)
Added
2023-07-11 (about 2 years ago)
Last Updated
2023-07-11 (about 2 years ago)

Other

Published
Title
Published
2025-12-24
Title
Five Star Restaurant Reservations < 2.7.9 - Cross-Site Request Forgery
Published
2025-10-10
Title
Course Redirects for Learndash Plugin <= 0.4 - Cross-Site Request Forgery
Published
2025-01-06
Title
Binary MLM Woocommerce < 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2024-10-15
Title
Post From Frontend <= 1.0.0 - Post Deletion via CSRF
Published
2023-05-25
Title
Product Gallery Slider for WooCommerce < 2.2.9 - Cross-Site Request Forgery (CSRF)