Plugin icon

WP Table Builder – Drag & Drop Table Builder

wp-table-builder

Vulnerabilities:

12

Last Updated:

April 2, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2026-01-08
Title
WP Table Builder < 2.0.20 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Table Creation
Fixed in
Fixed in 2.0.20
CVSS
4.3 (medium)
Published
2025-08-14
Title
WP Table Builder – WordPress Table Plugin < 2.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 2.0.13
CVSS
6.4 (medium)
Published
2025-08-14
Title
WP Table Builder < 2.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.13
CVSS
6.4 (medium)
Published
2025-06-05
Title
WP Table Builder < 2.0.7 - Cross-Site Request Forgery
Fixed in
Fixed in 2.0.7
CVSS
4.3 (medium)
Published
2025-04-09
Title
WP Table Builder < 2.0.6 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.0.6
CVSS
7.1 (high)
Published
2024-08-07
Title
WP Table Builder – WordPress Table Plugin < 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.0
CVSS
6.4 (medium)
Published
2024-08-02
Title
WP Table Builder < 1.6.0 - Admin+ Stored XSS
Fixed in
Fixed in 1.6.0
CVSS
3.4 (low)
Published
2024-05-20
Title
WP Table Builder – WordPress Table Plugin < 1.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.4.15
CVSS
6.4 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.4.10
CVSS
6.1 (medium)
Published
2023-02-20
Title
WP Table Builder < 1.4.7 - Admin+ Stored XSS
Fixed in
Fixed in 1.4.7
CVSS
5.9 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.3.16
CVSS
4.3 (medium)
Published
2021-09-27
Title
WP Table Builder < 1.3.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.10
CVSS
8.8 (high)