WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tablepress
Published
2024-06-06
Title
TablePress – Tables in WordPress made easy < 2.3.2 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind
Slug
tablepress
Published
2024-10-11
Title
TablePress < 2.4.3 - Author+ Stored XSS
Slug
tablepress
Published
2024-10-07
Title
TablePress < 2.4.3 - XXE Injection
Slug
tablepress
Published
2025-03-26
Title
TablePress < 3.1 - Author+ Stored XSS
Slug
tablepress
Published
2025-05-22
Title
TablePress < 3.1.3 - Contributor+ DOM-Based Stored XSS via Multiple Parameters
Slug
tablepress
Published
2025-08-29
Title
TablePress < 3.2.1 - Contributor+ Stored XSS
Slug
tablepress
Published
2025-11-03
Title
TablePress < 3.2.5 - Contributor+ Stored XSS
Slug
tablepress
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
tablesearch
Published
2025-02-27
Title
BuddyHolis TableSearch <= 1.1.0 - Contributor+ Stored Cross-Site Scripting
Slug
tablesome
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tablesome
Published
2023-04-24
Title
Tablesome < 1.0.9 - Reflected XSS
Slug
tablesome
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tablesome
Published
2024-03-16
Title
Table & Contact Form 7 Database – Tablesome < 1.0.28 - Reflected Cross-Site Scripting
Slug
tablesome
Published
2024-04-10
Title
Table & Contact Form 7 Database – Tablesome < 1.0.26 - Cross-Site Request Forgery
Slug
tablesome
Published
2024-07-04
Title
Table & Contact Form 7 Database – Tablesome < 1.0.34 - Unauthenticated Sensitive Information Exposure
Slug
tablesome
Published
2025-10-31
Title
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent < 1.3.33 - Unauthenticated Arbitrary File Upload
Slug
tablesome
Published
2025-12-05
Title
Tablesome < 1.1.35.1 - Missing Authorization
Slug
tablesome
Published
2025-12-22
Title
Tablesome < 1.1.35.2 - Authenticated (Subscriber+) Information Exposure
Slug
tablesome
Published
2025-12-22
Title
Tablesome < 1.1.35.2 - Missing Authorization
Slug
tablesome
Published
2026-01-26
Title
Tablesome < 1.2.9 - Missing Authorization
Slug
tablesome
Published
2026-02-18
Title
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation
Slug
tablesome
Published
2026-02-24
Title
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent < 1.2.4 - Authenticated (Subscriber+) SQL Injection
Slug
tablesome
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
tablesome-premium
Published
2025-07-22
Title
Tablesome Table Premium <= 1.1.23 - Missing Authorization
Slug
taboola
Published
2023-10-03
Title
Taboola < 2.0.2 - CSRF