PT-2024-30316 · WordPress · Woocommerce Product Table Lite

Stealthcopter · Published 2024-08-13 · Updated 2024-08-13 · CVE-2024-43128

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WooCommerce Product Table Lite versions 3.5.1 and earlier

Description The issue is related to an Improper Control of Generation of Code ('Code Injection') vulnerability in WooCommerce Product Table Lite, allowing Code Injection.

Recommendations For versions 3.5.1 and earlier, update to a version later than 3.5.1 to resolve the issue. As a temporary workaround, consider restricting access to the WooCommerce Product Table Lite plugin until a patch is available.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-43128

Affected Products

Woocommerce Product Table Lite

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-43128 · Security Note
• https://osv.dev/vulnerability/CVE-2024-43128 · Vendor Advisory
• https://t.me/cvenotify/90245 · Telegram Post
• https://twitter.com/PorsilapongoCl/status/1823318692689592465 · Twitter Post
• https://patchstack.com/database/vulnerability/wc-product-table-lite/wordpress-woocommerce-product-table-lite-plugin-3-5-1-arbitrary-code-execution-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1823316807194980394 · Twitter Post
• https://t.me/cvedetector/2991 · Telegram Post