CVE-2020-9392

HIGH 7.3CVE-2020-9392 · Published 23/03/2020 · updated 17/06/2026

In short

CVE-2020-9392 is a HIGH (CVSS 7.3) vulnerability affecting pricing table by supsystic (supsystic).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.9% of all vulnerabilities.
Fix: update to 1.8.2 or later.

Package	Affected versions	Patched versions
pricing table by supsystic supsystic	`< 1.8.2`	`1.8.2`

Description

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or import/modify a table.

References

wordfence.com/blog/2020/02/multiple-vulnerabilities-patched-in-pricing-table-by-supsystic-plugin · Exploit

More vulnerabilities in pricing table by supsystic

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free