CVE-2022-25604

Authenticated (contributor of higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Price Table plugin (versions <= 0.2.2).

Score

CVSS 3.1 5.4 Medium

Status

Modified - audit@patchstack.com

Published

2022-03-18

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Price Table Wordpress Plugin (Greg Priday)
• Price Table (Price Table Project)

References

• https://patchstack.com/database/vulnerability/pricetable/wordpress-price-table-plugin-0-2-2-stored-cross-site-scripting…
• https://wordpress.org/plugins/pricetable/