VULNERABILITY INTELLIGENCE

CVE-2025-15147

CVSS score4.3 MEDIUM

EPSS probability0.38%

CISA KEVNot currently listed

Published2026-02-10

Last modified2026-06-17

Description

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to unauthorized filter calling due to insufficient restrictions on the get_smth() function in all versions up to, and including, 1.0.6.7. This makes it possible for unauthenticated attackers to call arbitrary WordPress filters with a single parameter.