PLUGIN SECURITY
Is Active Woot Products Tables for WooCommerce. 100% FREE safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Active Woot Products Tables for WooCommerce. 100% FREE WordPress plugin — checked against WP Clinic's local security database.
What this plugin does
- Slug:
profit-products-tables-for-woocommerce
Maintenance status
Known vulnerabilities
20 known CVEs on file for Active Woot Products Tables for WooCommerce. 100% FREE .
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-123183 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 2.1.7 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | Medium 5.3 | < 2.1.7 | 2.1.7 | 2026-11-07 | — |
| CVE-2026-120579 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 2.1.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 2.1.6 | 2.1.6 | 2026-11-06 | — |
| CVE-2026-120560 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 2.1.6 | Improper Limitation of a Pathname to a Restricted Directory | Medium 6.5 | < 2.1.6 | 2.1.6 | 2026-10-13 | — |
| CVE-2026-108489 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 2.1.4 | — | Medium 5.3 | < 2.1.4 | 2.1.4 | 2026-09-15 | — |
| CVE-2026-66436 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 2.1.2 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Critical 9.3 | < 2.1.2 | 2.1.2 | 2026-08-07 | — |
| CVE-2026-91009 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 2.1.3 | Cross-Site Request Forgery (CSRF) | Unknown | < 2.1.3 | 2.1.3 | 2026-08-07 | — |
| CVE-2026-57409 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.1.1 | — | High 7.1 | < 1.1.1 | 1.1.1 | 2026-07-08 | — |
| CVE-2026-42761 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.1.0 | — | Critical 9.3 | < 1.1.0 | 1.1.0 | 2026-05-27 | — |
+ 16 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-42727 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.9 | — | Critical 9.3 | < 1.0.9 | 1.0.9 | 2026-05-19 | — |
| CVE-2026-32450 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 1.0.8 | 1.0.8 | 2026-03-10 | — |
| CVE-2025-48266 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.6.9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 1.0.6.9 | 1.0.6.9 | 2025-05-19 | — |
| CVE-2024-10959 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.6.6 | Improper Control of Generation of Code ('Code Injection') | High 7.3 | < 1.0.6.6 | 1.0.6.6 | 2024-12-09 | — |
| CVE-2024-10168 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 1.0.6.5 | 1.0.6.5 | 2024-11-05 | — |
| CVE-2024-35730 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.6.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 1.0.6.4 | 1.0.6.4 | 2024-06-06 | — |
| CVE-2024-32691 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.6.3 | Missing Authorization | Medium 5.3 | < 1.0.6.3 | 1.0.6.3 | 2024-04-19 | — |
| CVE-2024-0797 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.6.2 | Missing Authorization | Medium 4.3 | < 1.0.6.2 | 1.0.6.2 | 2024-01-31 | — |
| CVE-2024-0796 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.6.2 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.0.6.2 | 1.0.6.2 | 2024-01-31 | — |
| CVE-2023-51480 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.6.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 1.0.6.1 | 1.0.6.1 | 2023-12-27 | — |
| CVE-2023-51505 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.6.1 | Deserialization of Untrusted Data | Critical 10.0 | < 1.0.6.1 | 1.0.6.1 | 2023-12-27 | — |
| CVE-2022-1916 | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 1.0.5 | 1.0.5 | 2022-06-01 | — |
| — | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.4 | — | Unknown | < 1.0.4 | 1.0.4 | 2021-09-29 | — |
| — | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.6.7 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 1.0.6.7 | 1.0.6.7 | 0000-00-00 | — |
| — | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.6.8 | Improper Input Validation | High 7.3 | < 1.0.6.8 | 1.0.6.8 | 0000-00-00 | — |
| — | Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce] < 1.0.4 | — | Unknown | < 1.0.4 | 1.0.4 | — | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.