CVE-2024-0797

The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 1.0.6.1. This makes it possible for subscribers and higher to execute functions intended for admin use.

• CWE-862
• CWE-862
• CWE-862

• https://plugins.trac.wordpress.org/changeset/3029488/profit-products-tables-for-woocommerce/trunk?contextall=1&old=3005088&old_path=%2Fprofit-products-tables-for-woocommerce%2FtrunkPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0a94841f-b1dd-44f4-b7a1-65a9fdf7b18d?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset/3029488/profit-products-tables-for-woocommerce/trunk?contextall=1&old=3005088&old_path=%2Fprofit-products-tables-for-woocommerce%2FtrunkPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0a94841f-b1dd-44f4-b7a1-65a9fdf7b18d?source=cveThird Party Advisory

Published

Feb 5, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0791The WOLF – WordPress Posts Bulk Editor and Manager Professio…4.3
• CVE-2024-0792The WP Shortcodes Plugin — Shortcodes Ultimate plugin for Wo…5.4
• CVE-2024-0793A flaw was found in kube-controller-manager. This issue occu…7.7
• CVE-2024-0794Certain HP LaserJet Pro, HP Enterprise LaserJet, and HP Lase…9.8
• CVE-2024-0795If an attacked was given access to an instance with the admi…7.2
• CVE-2024-0796The Active Products Tables for WooCommerce. Professional pro…4.3
• CVE-2024-0798A privilege escalation vulnerability exists in mintplex-labs…6.5
• CVE-2024-0799An authentication bypass vulnerability exists in Arcserve Un…9.8
• CVE-2024-0800A path traversal vulnerability exists in Arcserve Unified Da…8.8
• CVE-2024-0801A denial of service vulnerability exists in Arcserve Unified…7.5
• CVE-2024-0802Incorrect Pointer Scaling vulnerability in Mitsubishi Electr…9.8
• CVE-2024-0803Integer Overflow or Wraparound vulnerability in Mitsubishi E…9.8