https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13472.htmlhttps://patchthecve.com/cve/CVE-2024-13472.htmlWed, 17 Jun 2026 07:02:05 +0000HIGH 7.3: The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.9.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it phttps://patchthecve.com/cve/CVE-2025-24596.htmlhttps://patchthecve.com/cve/CVE-2025-24596.htmlWed, 17 Jun 2026 08:59:17 +0000MEDIUM 5.3: Missing Authorization vulnerability in WC Product Table WooCommerce Product Table Lite wc-product-table-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Product Table Lite: from n/a through <= 3.8.7.https://patchthecve.com/cve/CVE-2024-10899.htmlhttps://patchthecve.com/cve/CVE-2024-10899.htmlWed, 17 Jun 2026 06:56:39 +0000HIGH 7.3: The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.8.6. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it phttps://patchthecve.com/cve/CVE-2024-43128.htmlhttps://patchthecve.com/cve/CVE-2024-43128.htmlWed, 17 Jun 2026 07:50:29 +0000MEDIUM 6.5: Improper Control of Generation of Code ('Code Injection') vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1.https://patchthecve.com/cve/CVE-2024-6458.htmlhttps://patchthecve.com/cve/CVE-2024-6458.htmlWed, 17 Jun 2026 08:18:03 +0000MEDIUM 6.4: The WooCommerce Product Table Lite plugin for WordPress is vulnerable to unauthorized post title modification due to a missing capability check on the wcpt_presets__duplicate_preset_to_table function in all versions up to, and including, 3.5.1. This makes it possible for authenticated attackers with