What’s Vulnerable › Vulnerabilities

CVE-2023-0900: AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-06-05 · updated 2026-06-17

Description

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins.

Affected products

• Pricing Table Builder – AP Pricing Tables Lite: through 1.1.6

References

• https://wpscan.com/vulnerability/f601e637-a486-4f3a-9077-4f294ace7ea1
• https://wpscan.com/vulnerability/f601e637-a486-4f3a-9077-4f294ace7ea1

Get alerted when CVE-2023-0900 or the next vulnerability affects your stack