WordPress security by component
Active Woot Products Tables for WooCommerce
Active Woot Products Tables for WooCommerce (active-woot-products-tables-for-woocommerce-100-free) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 17, 2026; the highest published CVSS base score is 4.3.
Plugin slug:
active-woot-products-tables-for-woocommerce-100-freeLatest vulnerability
CVE-2026-91009: Active Woot lets subscribers change unrelated content titles
Active Woot Products Tables for WooCommerce from 2.1.2 up to but not including 2.1.3, some AJAX actions lack both authorization and CSRF checks. A logged-in user such as a Subscriber can supply changes that alter the title of arbitrary posts, pages and products. The export does not identify the actions, content-ID field or title parameter. The documented impact is title modification, not arbitrary post-body editing.
| Safe version |
|
||
|---|---|---|---|
| Sep 17, 2026 |
CVE-2026-91009
Active Woot lets subscribers change unrelated content titles
Active Woot Products Tables for WooCommerce from 2.1.2 up to but not including 2.1.3, some AJAX actions lack both authorization and CSRF checks. A logged-in user such as a Subscriber can supply changes that alter the title of arbitrary posts, pages and products. The export does not identify the actions, content-ID field or title parameter. The documented impact is title modification, not arbitrary post-body editing.
|
2.1.3 |
CVE4.3
|