CVE-2025-31086: WordPress Product Table by WBW plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WBW Plugins Product Table by WBW woo-product-tables allows Reflected XSS.This issue affects Product Table by WBW: from n/a through <= 2.1.4.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31086?
The severity of CVE-2025-31086 is classified as a medium-level security vulnerability due to its potential for reflected cross-site scripting.
How do I fix CVE-2025-31086?
To fix CVE-2025-31086, update the Product Table by WBW plugin to version 2.1.5 or later.
What versions are affected by CVE-2025-31086?
CVE-2025-31086 affects all versions of the Product Table by WBW plugin up to and including version 2.1.4.
What type of vulnerability is CVE-2025-31086?
CVE-2025-31086 is a Cross-site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into web pages.
Who is the vendor for CVE-2025-31086?
The vendor for CVE-2025-31086 is WBW, specifically for their Product Table plugin for WordPress.