Skip to content
OpenAdvisories

Product · Elfsight

Pricing Table

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-4102

    Pricing Table <= 2.0.1 - Missing Authorization

    The Pricing Table plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() function in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with subscriber-level…

    Elfsight Pricing Table Web / CMS
  • Medium 5.3
    CVE-2024-4100

    Pricing Table <= 2.0.1 - Cross-Site Request Forgery via ajax()

    The Pricing Table plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.1. This is due to missing or incorrect nonce validation on the ajax() function. This makes it possible for unauthenticated attackers t…

    Elfsight Pricing Table Web / CMS