title: WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object Injection
description: Deserialization of Untrusted Data vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store.This issue affects Active Products Tables for WooCommerce. Professional products tables for WooCommerce store : from n/a through 1.0.6.
problem types: CWE-502 Deserialization of Untrusted Data
affected:
{
collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: profit-products-tables-for-woocommerce
product: Active Products Tables for WooCommerce. Professional products tables for WooCommerce store
vendor: realmag777
versions:
changes: [at: 1.0.6.1, status: unaffected], lessThanOrEqual: 1.0.6, status: affected, version: n/a, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Update to 1.0.6.1 or a higher version.