codersaiful
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Product Table for WooCommerce | 2 | – | Dec 21, 2025 |
| UltraAddons for Elementor | 2 | – | Nov 21, 2024 |
| Sheet to Table Live Sync for Google Sheet | 1 | – | Aug 14, 2024 |
Exploited and recent CVEs
- CVE-2025-12398 Product Table for WooCommerce <= 5.0.8 - Reflected Cross-Site Scripting 0.2%
- CVE-2024-10813 Product Table for WooCommerce by CodeAstrology (wooproducttable.com) <= 3.5.1 - Information Exposure 0.6%
- CVE-2024-10696 UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.8 - Insecure Direct Object Reference to Sensitive Information Exposure via UA_Template Shortcode 0.5%
- CVE-2024-6532 Sheet to Table Live Sync for Google Sheet <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via STWT_Sheet_Table Shortcode 0.3%
- CVE-2024-4866 UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.4%