What’s Vulnerable › Vulnerabilities

CVE-2022-25604: WordPress Price Table plugin <= 0.2.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-18 · updated 2026-06-17
• Weakness: CWE-79

Description

Authenticated (contributor of higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Price Table plugin (versions <= 0.2.2).

Affected products

• Greg Priday Price Table (WordPress plugin): through 0.2.2

References

• https://patchstack.com/database/vulnerability/pricetable/wordpress-price-table-plugin-0-2-2-stored-cross-site-scripting-xss-vulnerability
• https://wordpress.org/plugins/pricetable/
• https://patchstack.com/database/vulnerability/pricetable/wordpress-price-table-plugin-0-2-2-stored-cross-site-scripting-xss-vulnerability
• https://wordpress.org/plugins/pricetable/

Get alerted when CVE-2022-25604 or the next vulnerability affects your stack