Medium · 4.8 CVE-2021-36896 EUVD-2021-23472GHSA-xxwr-whmf-f56p

WordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Apr 11, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress plugin) versions <= 1.5.2

Vendor	Product	Affected	Fixed
W3 Eden	Pricing Table (WordPress plugin)	<= 1.5.2 – ≤ 1.5.2	—