Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2026-14924: Tablesome Table Plugin (WordPress) allows unauthenticated post changes
CVE-2026-14924 · published 3 months ago
Summary
A security issue in the Tablesome Table WordPress plugin before version 1.1.31 allows anyone to create or modify posts without needing permission. This means that malicious users can create new posts or change existing ones without being authorized. To fix this, update the plugin to version 1.1.31 or later.
What to do
- Update unknown tablesome table to version 1.1.31 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| unknown | tablesome table | < 1.1.31 |
Original advisory text
Tablesome < 1.1.31 - Unauthenticated Post Creation and Modification
The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Severity
7.5
High
Type
CWE-862Missing Authorization
Timeline
Published28 Jul 2026
Updated4 Nov 2026
First seen28 Jul 2026
Track software like this
Free during beta