CVE-2026-108489: WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability

Q: Does exploitation require an account or user interaction?

No. The CVSS vector indicates the issue is remotely exploitable over the network with low attack complexity, no privileges required, and no user interaction required.

Q: What is the expected security impact beyond data disclosure?

The reported CVSS metrics indicate low confidentiality impact and no integrity or availability impact. The available data does not indicate that exploitation modifies data or disrupts service.

Published Oct 13, 2026

Updated

Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Active Products Tables for WooCommerce: from n/a through 2.1.3.

Affected Software

1 affected component

PluginUs.Net Active Products Tables for WooCommerce<=2.1.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade profit-products-tables-for-woocommerce to a version that resolves this vulnerability.
Fixed in 2.1.4

Event History

Oct 13, 2026

CVE Published

via MITRE·08:43 AM

Data Sourced

via MITRE·08:43 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Does exploitation require an account or user interaction?

No. The CVSS vector indicates the issue is remotely exploitable over the network with low attack complexity, no privileges required, and no user interaction required.

What is the expected security impact beyond data disclosure?