Critical severity · published Dec 29, 2023
CVE-2023-51505
WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object Injection
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
Deserialization of Untrusted Data vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store.This issue affects Active Products Tables for WooCommerce. Professional products tables for WooCommerce store : from n/a through 1.0.6.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store · realmag777
through 1.0.6 · source: vendor
WO
Woot · Pluginus
through 1.0.6 · source: NVD, CISA
Affected product
AP
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store
realmag777
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-51505
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-51505
Third Party Advisory
https://patchstack.com/database/vulnerability/profit-products-tables-for-woocommerce/wordpress-active-products-tables-for-woocommerce-plugin-1-0-6-unauthenticated-php-object-injection-vulnerability?_s_id=cve
More from Active Products Tables for WooCommerce. Professional products tables for WooCommerce store
5.4
CVE-2023-51480
WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)