Wrc Pricing Tables Vulnerabilities

The WRC Pricing Tables plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on several functions including wrcpt_process_package_features, wrcpt_edit_pricing_packages, wrcpt_activate_template and others in versions up to, and including, 2.3.7. This makes it possible for...

CVSS:

5.3

Affected:

up to 2.3.7

Fixed in:

2.3.8

Disclosed:

Sep 4, 2023

CVE-2023-32293 on NVD →

The WRC Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in p...

CVSS:

4.4

Affected:

up to 2.3.4

Fixed in:

2.3.5

Disclosed:

Jul 20, 2023

CVE-2023-38517 on NVD →