Active Products Tables for WooCommerce. Professional products tables for WooCommerce store , CVE-2024-10959

CVE, Research URL: CVE-2024-10959
Home page URL: Security reports for Active Products Tables for WooCommerce. Professional products tables for WooCommerce store
Application: Active Products Tables for WooCommerce. Professional products tables for WooCommerce store
Published on: Dec 10, 2024
Research Description: The The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to arbitrary shortcode execution via woot_get_smth AJAX action in all versions up to, and including, 1.0.6.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Affected versions: max 1.0.6.6.
Status: vulnerable