spwebguy CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM spwebguy CVE published 2026-01-07

CVE-2025-15058

The Responsive Pricing Table plugin for WordPress has a Stored Cross-Site Scripting vulnerability via the 'table_currency' parameter in all versions up to, and including, 5.1.12. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts in pages that execute when a user accesses an injected page. The vulnerability exists due to insufficient input sanitizat [truncated]