WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tablepress
Published
2017-11-14
Title
TablePress <= 1.8 - Authenticated XML External Entity (XXE)
Slug
tablepress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tablepress
Published
2024-01-31
Title
TablePress < 2.2.5 - Authenticated(Author+) Server Side Request Forgery(SSRF) via _get_import_files
Slug
tablepress
Published
2024-06-06
Title
TablePress – Tables in WordPress made easy < 2.3.2 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind
Slug
tablepress
Published
2024-10-11
Title
TablePress < 2.4.3 - Author+ Stored XSS
Slug
tablepress
Published
2024-10-07
Title
TablePress < 2.4.3 - XXE Injection
Slug
tablepress
Published
2025-03-26
Title
TablePress < 3.1 - Author+ Stored XSS
Slug
tablepress
Published
2025-05-22
Title
TablePress < 3.1.3 - Contributor+ DOM-Based Stored XSS via Multiple Parameters
Slug
tablepress
Published
2025-08-29
Title
TablePress < 3.2.1 - Contributor+ Stored XSS
Slug
tablepress
Published
2025-11-03
Title
TablePress < 3.2.5 - Contributor+ Stored XSS
Slug
tablepress
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
tablepress
Published
2026-06-25
Title
TablePress < 3.3.2 - Reflected Cross-Site Scripting
Slug
tables-generator-pro
Published
2026-07-24
Title
Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
Slug
tablesearch
Published
2025-02-27
Title
BuddyHolis TableSearch <= 1.1.0 - Contributor+ Stored Cross-Site Scripting
Slug
tablesome
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tablesome
Published
2023-04-24
Title
Tablesome < 1.0.9 - Reflected XSS
Slug
tablesome
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tablesome
Published
2024-03-16
Title
Table & Contact Form 7 Database – Tablesome < 1.0.28 - Reflected Cross-Site Scripting
Slug
tablesome
Published
2024-04-10
Title
Table & Contact Form 7 Database – Tablesome < 1.0.26 - Cross-Site Request Forgery
Slug
tablesome
Published
2024-07-04
Title
Table & Contact Form 7 Database – Tablesome < 1.0.34 - Unauthenticated Sensitive Information Exposure
Slug
tablesome
Published
2025-10-31
Title
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent < 1.3.33 - Unauthenticated Arbitrary File Upload
Slug
tablesome
Published
2025-12-05
Title
Tablesome < 1.1.35.1 - Missing Authorization
Slug
tablesome
Published
2025-12-22
Title
Tablesome < 1.1.35.2 - Authenticated (Subscriber+) Information Exposure
Slug
tablesome
Published
2025-12-22
Title
Tablesome < 1.1.35.2 - Missing Authorization
Slug
tablesome
Published
2026-01-26
Title
Tablesome < 1.2.9 - Missing Authorization