Vulnerabilities > CVE-2024-43128 - Unspecified vulnerability in Wcproducttable Woocommerce Product Table

CVSS 7.3 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

LOW

network

low complexity

wcproducttable

NVD

Published: 2024-08-13

Updated: 2025-02-19

Summary

Improper Control of Generation of Code ('Code Injection') vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1.

Vulnerable Configurations

Part	Description	Count
Application	Wcproducttable Wcproducttable Woocommerce Product Table - Wcproducttable Woocommerce Product Table 1.0.0 Wcproducttable Woocommerce Product Table 1.1.0 Wcproducttable Woocommerce Product Table 1.2.0 Wcproducttable Woocommerce Product Table 1.3.0 Wcproducttable Woocommerce Product Table 2.7.1 Wcproducttable Woocommerce Product Table 2.7.2 Wcproducttable Woocommerce Product Table 2.8.1 Wcproducttable Woocommerce Product Table 3.1.1 Wcproducttable Woocommerce Product Table 3.1.2 Wcproducttable Woocommerce Product Table 3.2.0 Wcproducttable Woocommerce Product Table 3.3.0 Wcproducttable Woocommerce Product Table 3.4.0 Wcproducttable Woocommerce Product Table 3.5.0 Wcproducttable Woocommerce Product Table 3.5.1 Wcproducttable Woocommerce Product Table 3.5.2	16

References

https://patchstack.com/database/vulnerability/wc-product-table-lite/wordpress-woocommerce-product-table-lite-plugin-3-5-1-arbitrary-code-execution-vulnerability?_s_id=cve