WordPress plugin
Active Woot Products Tables for WooCommerce. 100% FREE security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 22 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High6
- Medium15
- Low0
All Active Woot Products Tables for WooCommerce. 100% FREE vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via 'help_title' Shortcode Attribute ≤2.1.5Update to 2.1.6 | CVE-2026-120579 | |
| Medium6.5 | Unauthenticated Arbitrary Shortcode Execution ≤2.1.6Update to 2.1.7 | CVE-2026-123183 | |
| Medium6.5 | Unauthenticated File Deletion via 'wp_columns_actions' and 'table_id' Parameters ≤2.1.5Update to 2.1.6 | CVE-2026-120560 | |
| Medium5.3 | Unauthenticated Information Exposure ≤2.1.3Update to 2.1.4 | CVE-2026-108489 | |
| Medium4.3 | Missing Authorization ≤2.1.2Update to 2.1.3 | CVE-2026-91009 | |
| High7.5 | Unauthenticated SQL Injection ≤1.1.1Update to 2.1.2 | CVE-2026-66436 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.1.0Update to 1.1.1 | CVE-2026-57409 | |
| High7.5 | Unauthenticated SQL Injection ≤1.0.9Update to 1.1.0 | CVE-2026-42761 | |
| High7.5 | Unauthenticated SQL Injection ≤1.0.8Update to 1.0.9 | CVE-2026-42727 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.0.7Update to 1.0.8 | CVE-2026-32450 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.0.6.8Update to 1.0.6.9 | CVE-2025-48266 | |
| High7.3 | Unauthenticated Arbitrary Filter Call ≤1.0.6.7Update to 1.0.6.8 | CVE-2025-1514 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.0.6.6Update to 1.0.6.7 | CVE-2025-0864 | |
| High7.3 | Unauthenticated Arbitrary Shortcode Execution via woot_get_smth ≤1.0.6.5Update to 1.0.6.6 | CVE-2024-10959 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode ≤1.0.6.4Update to 1.0.6.5 | CVE-2024-10168 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.0.6.3Update to 1.0.6.4 | CVE-2024-35730 | |
| Medium6.5 | Missing Authorization ≤1.0.6.2Update to 1.0.6.3 | CVE-2024-32691 | |
| Medium4.3 | Missing Authorization ≤1.0.6.1Update to 1.0.6.2 | CVE-2024-0797 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.0.6.1Update to 1.0.6.2 | CVE-2024-0796 | |
| Critical9.8 | Unauthenticated PHP Object Injection ≤1.0.6Update to 1.0.6.1 | CVE-2023-51505 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.0.6Update to 1.0.6.1 | CVE-2023-51480 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.0.4Update to 1.0.5 | CVE-2022-1916 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'help_title' Shortcode Attribute
≤2.1.5Update to 2.1.6
- Medium6.5Unauthenticated Arbitrary Shortcode Execution
≤2.1.6Update to 2.1.7
- Medium6.5Unauthenticated File Deletion via 'wp_columns_actions' and 'table_id' Parameters
≤2.1.5Update to 2.1.6
- Medium5.3Unauthenticated Information Exposure
≤2.1.3Update to 2.1.4
- Medium4.3Missing Authorization
≤2.1.2Update to 2.1.3
- High7.5Unauthenticated SQL Injection
≤1.1.1Update to 2.1.2
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.1.0Update to 1.1.1
- High7.5Unauthenticated SQL Injection
≤1.0.9Update to 1.1.0
- High7.5Unauthenticated SQL Injection
≤1.0.8Update to 1.0.9
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.0.7Update to 1.0.8
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.0.6.8Update to 1.0.6.9
- High7.3Unauthenticated Arbitrary Filter Call
≤1.0.6.7Update to 1.0.6.8
- Medium6.1Reflected Cross-Site Scripting
≤1.0.6.6Update to 1.0.6.7
- High7.3Unauthenticated Arbitrary Shortcode Execution via woot_get_smth
≤1.0.6.5Update to 1.0.6.6
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode
≤1.0.6.4Update to 1.0.6.5
- Medium6.1Reflected Cross-Site Scripting
≤1.0.6.3Update to 1.0.6.4
- Medium6.5Missing Authorization
≤1.0.6.2Update to 1.0.6.3
- Medium4.3Missing Authorization
≤1.0.6.1Update to 1.0.6.2
- Medium4.3Cross-Site Request Forgery
≤1.0.6.1Update to 1.0.6.2
- Critical9.8Unauthenticated PHP Object Injection
≤1.0.6Update to 1.0.6.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.0.6Update to 1.0.6.1
- Medium6.1Reflected Cross-Site Scripting
≤1.0.4Update to 1.0.5
Active Woot Products Tables for WooCommerce. 100% FREE : common questions
Does Active Woot Products Tables for WooCommerce. 100% FREE have known vulnerabilities?
Yes. VulnCrest Radar lists 22 known vulnerabilities in Active Woot Products Tables for WooCommerce. 100% FREE : 1 critical, 6 high, 15 medium. None are known to affect version null.
How do I check which version of Active Woot Products Tables for WooCommerce. 100% FREE I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Active Woot Products Tables for WooCommerce. 100% FREE vulnerability?
CVE-2026-120579, published Nov 7, 2026: Active Woot Products Tables for WooCommerce. 100% FREE <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'help_title' Shortcode Attribute. Severity: Medium (CVSS 6.4).
Is any Active Woot Products Tables for WooCommerce. 100% FREE vulnerability listed in CISA KEV?
No. None of the known Active Woot Products Tables for WooCommerce. 100% FREE vulnerabilities is currently listed in the CISA KEV catalog.