sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2023-51505 WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object Injection

Critical 10.0 Published Updated

An attacker can exploit PHP object injection in the Active Products Tables for WooCommerce plugin to potentially execute arbitrary code.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2023-51505?

CVE-2023-51505 is a critical unsafe deserialization vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store, published on 29 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Deserialization of Untrusted Data vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store.This issue affects Active Products Tables for WooCommerce. Professional products tables for WooCommerce store : from n/a through 1.0.6.

Weakness: CWE-502

Which versions are affected by CVE-2023-51505?

It affects 1 product.

Products include Pluginus Woot.

How do I fix CVE-2023-51505?

No fix has been published for CVE-2023-51505 yet. Limit exposure of the affected software until one is available.

Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.

Is CVE-2023-51505 being exploited?

There is no known exploitation of CVE-2023-51505 in the wild and no public exploit code.

Sources

Also known as GHSA-gmwm-8qjm-hchh.

Is CVE-2023-51505 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free