WordPress Plugin Vulnerabilities

Tablesome < 1.1.35.2 - Missing Authorization

Description

The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.1.35.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.

Affects Plugins

Fixed in 1.1.35.2

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Original Researcher
daroo
Verified
No

Timeline

Publicly Published
2025-12-22 (about 8 months ago)
Added
2026-01-06 (about 7 months ago)
Last Updated
2026-01-06 (about 7 months ago)

Other