Codeastrology vulnerabilities
We track 3 vulnerabilities in Codeastrology products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 23, 2024.
Latest Codeastrology vulnerabilities
- 7.5 High severity
Product Table for WooCommerce: Missing Authorization
The Product Table for WooCommerce by CodeAstrology (wooproducttable.com) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1 via the var_dump_table parameter. This makes it possible for unauthenticat
- 8.8 High severity
Quantity Plus Minus Button for WooCommerce by…: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in CodeAstrology Team Quantity Plus Minus Button for WooCommerce by CodeAstrology.This issue affects Quantity Plus Minus Button for WooCommerce by CodeAstrology: from n/a through 1.1.9.
- 9.8 Critical severity
Product Table for WooCommerce (wooproducttable): Cross-Site Request Forgery
The Product Table for WooCommerce (wooproducttable) WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wpt_admin_update_notice_option AJAX action (available to both unauthenticated and authenticated users), as well as does not val