How many Pluginus woot CVEs are in CISA KEV?

None of Pluginus woot's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Pluginus woot are affected?

10 distinct Pluginus woot versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Pluginus woot CVEs?

Pluginus woot's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-502 (Deserialization of Untrusted Data).

How many critical Pluginus woot vulnerabilities are there?

Pluginus woot has 1 critical and 1 high-severity CVEs.

What is the average severity of Pluginus woot CVEs?

The average CVSS base score across Pluginus woot's scored CVEs is 6.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Pluginus

8 CVEs

Pluginus woot Vulnerabilities

Name: Pluginus woot vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for woot by Pluginus.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.3

Avg CVSS

2022–2024

Last updated November 6, 2024

Overview

Pluginus woot has 8 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Pluginus woot, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Pluginus woot's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Pluginus woot's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Pluginus woot CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Pluginus woot version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 1.0.6.23 CVEs
<= 1.0.62 CVEs
< 1.0.51 CVE
< 1.0.6.41 CVE
< 1.0.6.51 CVE

Fixed in

> 1.0.61 CVE
> 1.0.6.21 CVE
1.0.51 CVE
1.0.6.41 CVE
1.0.6.51 CVE

Find a version

8 CVEs

Sort

Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode
CVE-2024-10168
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (22th pct)2024-11-06
WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-35730
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (21th pct)2024-06-08
WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.2 - Broken Access Control vulnerability
CVE-2024-32691
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.4% (32th pct)2024-04-22
WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-51480
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.3% (23th pct)2024-02-10
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Cross-Site Request Forgery
CVE-2024-0796
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.2% (16th pct)2024-02-05
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Missing Authorization
CVE-2024-0797
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.4% (35th pct)2024-02-05
WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object Injection
CVE-2023-51505
Patch
CWE-502
Critical · CVSS 10.0
EPSS 0.7% (47th pct)2023-12-29
Active Products Tables for WooCommerce < 1.0.5 - Reflected Cross-Site-Scripting
CVE-2022-1916
Patch
CWE-79
Medium · CVSS 6.1
EPSS 1.9% (77th pct)2022-06-27

Common weakness types

The CWE weakness categories most often found in Pluginus woot CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Pluginus woot CVEs were published each year.

2022

1

2023

1

2024

6

Other Pluginus products

Browse vulnerabilities for other products by Pluginus.

bear - woocommerce bulk editor and products manager professional18 CVEs husky - products filter professional for woocommerce14 CVEs wordpress meta data and taxonomies filter12 CVEs wolf - wordpress posts bulk editor and products manager professional10 CVEs fox - currency switcher professional for woocommerce7 CVEs wordpress currency switcher4 CVEs inpost gallery3 CVEs wordpress currency switcher professional3 CVEs

All Pluginus vulnerabilities

Frequently asked questions

Common questions about Pluginus woot vulnerabilities.

How many CVEs does Pluginus woot have?: Pluginus woot has 8 published CVE records since 2022.
How many Pluginus woot CVEs are in CISA KEV?: None of Pluginus woot's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Pluginus woot vulnerabilities?: No Pluginus woot CVEs currently have a tracked public exploit in this dataset.
Which versions of Pluginus woot are affected?: 10 distinct Pluginus woot versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Pluginus woot CVEs?: Pluginus woot's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-502 (Deserialization of Untrusted Data).
How many critical Pluginus woot vulnerabilities are there?: Pluginus woot has 1 critical and 1 high-severity CVEs.
What is the average severity of Pluginus woot CVEs?: The average CVSS base score across Pluginus woot's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Pluginus woot vulnerabilities

Monitor new Pluginus woot vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing