Active Products Tables for WooCommerce. Use constructor to create tables 

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Active Products Tables for WooCommerce. Use constructor to create tables 

Information

Software Type Plugin
Software Slug profit-products-tables-for-woocommerce (view on wordpress.org)
Software Status Active
Software Author realmag777
Software Website products-tables.com
Software Downloads 78,283
Software Active Installs 1,000
Software Record Last Updated July 22, 2026

16 Vulnerabilities

Submit a Vulnerability
Active Products Tables for WooCommerce. Use constructor to create tables  <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-57409
Jul 8, 2026
Researcher: hhhai
Active Products Tables for WooCommerce. Use constructor to create tables  <= 1.0.9 - Unauthenticated SQL Injection
7.5
CVE-2026-42761
Jun 1, 2026
Researcher: hhhai
Active Products Tables for WooCommerce. Use constructor to create tables  <= 1.0.8 - Unauthenticated SQL Injection
7.5
CVE-2026-42727
May 19, 2026
Researcher: endy
Active Products Tables for WooCommerce. Use constructor to create tables  <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2026-32450
Mar 10, 2026
Researcher: zaim
Active Products Tables for WooCommerce <= 1.0.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-48266
May 19, 2025
Researcher: Peter Thaleikis
Active Products Tables for WooCommerce <= 1.0.6.7 - Unauthenticated Arbitrary Filter Call
7.3
CVE-2025-1514
Mar 25, 2025
Researcher: Arkadiusz Hydzik
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.6 - Reflected Cross-Site Scripting
6.1
CVE-2025-0864
Feb 17, 2025
Researcher: Brian Sans-Souci (liardom)
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smth
7.3
CVE-2024-10959
Dec 9, 2024
Researcher: Arkadiusz Hydzik
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode
6.4
CVE-2024-10168
Nov 5, 2024
Researcher: Peter Thaleikis
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-35730
Jun 6, 2024
Researcher: Le Ngoc Anh
Active Products Tables for WooCommerce <= 1.0.6.2 - Missing Authorization
6.5
CVE-2024-32691
Apr 19, 2024
Researcher: Dhabaleshwar Das
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Missing Authorization
4.3
CVE-2024-0797
Jan 31, 2024
Researcher: Francesco Carlucci
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Cross-Site Request Forgery
4.3
CVE-2024-0796
Jan 31, 2024
Researcher: Francesco Carlucci
Active Products Tables for WooCommerce <= 1.0.6 - Unauthenticated PHP Object Injection
9.8
CVE-2023-51505
Dec 27, 2023
Researcher: LVT-tholv2k
Active Products Tables for WooCommerce <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2023-51480
Dec 27, 2023
Researcher: LVT-tholv2k
Active Products Tables for WooCommerce <= 1.0.4 - Reflected Cross-Site Scripting
6.1
CVE-2022-1916
Jun 1, 2022
Researcher: cydave
Title Status CVE ID CVSS Researchers Date
Active Products Tables for WooCommerce. Use constructor to create tables  <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-57409 7.2 hhhai July 8, 2026
Active Products Tables for WooCommerce. Use constructor to create tables  <= 1.0.9 - Unauthenticated SQL Injection Patched CVE-2026-42761 7.5 hhhai June 1, 2026
Active Products Tables for WooCommerce. Use constructor to create tables  <= 1.0.8 - Unauthenticated SQL Injection Patched CVE-2026-42727 7.5 endy May 19, 2026
Active Products Tables for WooCommerce. Use constructor to create tables  <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2026-32450 6.4 zaim March 10, 2026
Active Products Tables for WooCommerce <= 1.0.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-48266 6.4 Peter Thaleikis May 19, 2025
Active Products Tables for WooCommerce <= 1.0.6.7 - Unauthenticated Arbitrary Filter Call Patched CVE-2025-1514 7.3 Arkadiusz Hydzik March 25, 2025
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.6 - Reflected Cross-Site Scripting Patched CVE-2025-0864 6.1 Brian Sans-Souci (liardom) February 17, 2025
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smth Patched CVE-2024-10959 7.3 Arkadiusz Hydzik December 9, 2024
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode Patched CVE-2024-10168 6.4 Peter Thaleikis November 5, 2024
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.3 - Reflected Cross-Site Scripting Patched CVE-2024-35730 6.1 Le Ngoc Anh June 6, 2024
Active Products Tables for WooCommerce <= 1.0.6.2 - Missing Authorization Patched CVE-2024-32691 6.5 Dhabaleshwar Das April 19, 2024
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Missing Authorization Patched CVE-2024-0797 4.3 Francesco Carlucci January 31, 2024
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Cross-Site Request Forgery Patched CVE-2024-0796 4.3 Francesco Carlucci January 31, 2024
Active Products Tables for WooCommerce <= 1.0.6 - Unauthenticated PHP Object Injection Patched CVE-2023-51505 9.8 LVT-tholv2k December 27, 2023
Active Products Tables for WooCommerce <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2023-51480 6.4 LVT-tholv2k December 27, 2023
Active Products Tables for WooCommerce <= 1.0.4 - Reflected Cross-Site Scripting Patched CVE-2022-1916 6.1 cydave June 1, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation