Plugin icon

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent

tablesome

Vulnerabilities:

14

Last Updated:

May 5, 2026

Active Installs:

8000

Published
Title
Fixed in
CVSS
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Fixed in
Fixed in 1.1.17
CVSS
7.1 (high)
Published
2026-02-24
Title
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent < 1.2.4 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 1.2.4
CVSS
6.5 (medium)
Published
2026-02-18
Title
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation
Fixed in
Fixed in 1.2.2
CVSS
8.8 (high)
Published
2026-01-26
Title
Tablesome < 1.2.9 - Missing Authorization
Fixed in
Fixed in 1.2.9
CVSS
4.3 (medium)
Published
2025-12-22
Title
Tablesome < 1.1.35.2 - Missing Authorization
Fixed in
Fixed in 1.1.35.2
CVSS
4.3 (medium)
Published
2025-12-22
Title
Tablesome < 1.1.35.2 - Authenticated (Subscriber+) Information Exposure
Fixed in
Fixed in 1.1.35.2
CVSS
6.5 (medium)
Published
2025-12-05
Title
Tablesome < 1.1.35.1 - Missing Authorization
Fixed in
Fixed in 1.1.35.1
CVSS
4.3 (medium)
Published
2025-10-31
Title
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent < 1.3.33 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 1.3.33
CVSS
9.8 (critical)
Published
2024-07-04
Title
Table & Contact Form 7 Database – Tablesome < 1.0.34 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 1.0.34
CVSS
5.3 (medium)
Published
2024-04-10
Title
Table & Contact Form 7 Database – Tablesome < 1.0.26 - Cross-Site Request Forgery
Fixed in
Fixed in 1.0.26
CVSS
4.3 (medium)
Published
2024-03-16
Title
Table & Contact Form 7 Database – Tablesome < 1.0.28 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.0.28
CVSS
6.1 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.0.15
CVSS
6.1 (medium)
Published
2023-04-24
Title
Tablesome < 1.0.9 - Reflected XSS
Fixed in
Fixed in 1.0.9
CVSS
5.8 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 0.6.7
CVSS
4.3 (medium)