CVE-2026-6808

The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrator into performing an action such as clicking on a link.

• CWE-79

• https://plugins.trac.wordpress.org/browser/awesome-pricing-tables-lite-by-optimalplugins/tags/1.1.0/OPT/Admin/Pages/Main.php#L44
• https://plugins.trac.wordpress.org/browser/awesome-pricing-tables-lite-by-optimalplugins/trunk/OPT/Admin/Pages/Main.php#L44
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0ab4cdcd-1ca8-4ee9-87ab-bf4ce33f94d3?source=cve

Published

May 12, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-68073A pre-authentication attacker could leverage type nesting to…7.5
• CVE-2026-68074A pre-authentication attacker could leverage unbounded symbo…7.5
• CVE-2026-68075An authenticated attacker could exceed the session flow cont…6.5
• CVE-2026-68077An authenticated attacker can craft a disposition frame with…6.5
• CVE-2026-68078It was not possible to govern the maximum number of transfer…6.5
• CVE-2026-68079In Apache CXF's DefaultEncryptingCodeDataProvider, a capture…9.8
• CVE-2026-68080It was not possible to govern the rate at which the broker w…6.5
• CVE-2026-68081In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68082In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68083In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68084In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68085In the Linux kernel, the following vulnerability has been re…