Product Table for WooCommerce by WBW

Product Table for WooCommerce by WBW has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Code Injection, behind 1 of the records (25%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

Every one of the 4 issues recorded for Product Table for WooCommerce by WBW has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by Trương Hữu Phúc (truonghuuphuc).

01234567891027.12.2023Today27.12.20234.3Product Table by WBW <= 1.8.6 - Cross-Site Request Forgery via saveGroup CVSS 4.3 · 27.12.202308.07.20249.8Product Table by WBW <= 2.0.1 - Unauthenticated Remote Code Execution CVSS 9.8 · 08.07.202422.01.20257.5Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection CVSS 7.5 · 22.01.202501.04.20256.1Product Table by WBW <= 2.1.4 - Reflected Cross-Site Scripting CVSS 6.1 · 01.04.2025

Strategic Overview

Avg CVSSMedium
6.9/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Product Table for WooCommerce by WBW vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-6365

Product Table by WBW <= 2.0.1 - Unauthenticated Remote Code Execution

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C