CVE-2023-0900: Wpdevart Pricing Table Builder

High severity, CVSS 7.2. EPSS: 3.2% chance of exploitation in the next 30 days.

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins.

Affected products

• Wpdevart Pricing Table Builder: up to and including 1.1.6

Published 2023-06-05. Last modified 2026-06-17.