CVE-2025-1514: Active Products Tables for WooCommerce <= 1.0.6.7 - Unauthenticated Arbitrary Filter Call
The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to unauthorized filter calling due to insufficient restrictions on the getsmth() function in all versions up to, and including, 1.0.6.7. This makes it possible for unauthenticated attackers to call arbitrary WordPress filters with a single parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1514?
CVE-2025-1514 has a medium severity due to the potential for unauthorized access through insufficient restrictions.
How do I fix CVE-2025-1514?
To fix CVE-2025-1514, upgrade the Active Products Tables for WooCommerce plugin to version 1.0.6.8 or later.
Which versions are affected by CVE-2025-1514?
All versions of the Active Products Tables for WooCommerce plugin up to and including 1.0.6.7 are affected by CVE-2025-1514.
What is the impact of CVE-2025-1514?
CVE-2025-1514 can lead to unauthorized filter calling, potentially allowing attackers to access sensitive data.
Who is primarily affected by CVE-2025-1514?
Users of the Active Products Tables for WooCommerce plugin in their WordPress installations are primarily affected by CVE-2025-1514.