The Active Woot Products Tables for WooCommerce WordPress plugin versions up to and including 2.1.5 are vulnerable to stored cross-site scripting (XSS) via the 'help_title' parameter. This vulnerability allows authenticated users with contributor-level access or higher to inject malicious scripts that execute when other users view the affected pages.