Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-34659 EUVD-2021-21309GHSA-78q8-5843-6h3f

Plugmatter Pricing Table Lite <= 1.0.32 Reflected Cross-Site Scripting

Published Aug 16, 2021 · Updated May 23, 2025 · Assigned by Wordfence

Description

The Plugmatter Pricing Table Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `email` parameter in the ~/license.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.32.

Affected products

VendorProductAffectedFixed
Plugmatter Pricing Table Lite Plugmatter Pricing Table Lite 1.0.32 – ≤ 1.0.32 —

References