Skip to main content

Granthweb

4 CVEs vendor

Monthly

CVE-2023-2500 May 25, 00:15 HIGH This Week

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.3.19 via deserialization of untrusted input from. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure Deserialization Go Pricing +1
NVD VulDB
CVSS 3.1
8.8
EPSS
0.7%
CVE-2023-2498 May 24, 00:15 MEDIUM This Month

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.19 due to insufficient. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Go Pricing Granthweb
NVD
CVSS 3.1
6.4
EPSS
0.1%
CVE-2023-2496 May 24, 00:15 HIGH This Week

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability check on the 'validate_upload' function in. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.

WordPress Authentication Bypass RCE Go Pricing Granthweb
NVD
CVSS 3.1
7.1
EPSS
3.3%
CVE-2023-2494 May 24, 00:15 MEDIUM This Month

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in. Rated medium severity (CVSS 4.6), this vulnerability is remotely exploitable. No vendor patch available.

WordPress Authentication Bypass Go Pricing Granthweb
NVD
CVSS 3.1
4.6
EPSS
0.1%
EPSS 1% CVSS 8.8
HIGH This Week

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.3.19 via deserialization of untrusted input from. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure +3
NVD VulDB
EPSS 0% CVSS 6.4
MEDIUM This Month

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.19 due to insufficient. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Go Pricing +1
NVD
EPSS 3% CVSS 7.1
HIGH This Week

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability check on the 'validate_upload' function in. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.

WordPress Authentication Bypass RCE +2
NVD
EPSS 0% CVSS 4.6
MEDIUM This Month

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in. Rated medium severity (CVSS 4.6), this vulnerability is remotely exploitable. No vendor patch available.

WordPress Authentication Bypass Go Pricing +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy