CVE-2024-43128CWE-94

WordPress WooCommerce Product Table Lite plugin <= 3.5.1 - Arbitrary Code Execution vulnerability

Medium · published August 13, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
19.6
In the wild
Unconfirmed
What it is

Improper Control of Generation of Code ('Code Injection') vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00282 · 19.6th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2024-08-13T10:52Z
EPSS history
Timeline
  • 13 AUG 10:52Z
    WordPress WooCommerce Product Table Lite plugin <= 3.5.1 - Arbitrary Code Execution vulnerability
    cvelistv5