CVE-2025-66526
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
The Tablesome plugin up to version 1.1.34 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
Risk Assessment
Unauthorized users may gain access to administrative functions or data, potentially leading to confidentiality and integrity breaches.
Recommendation
Immediately update the plugin to the latest version and review access control configurations.
Other vulnerabilities in Tablesome
See all- CVE-2025-68517Medium
Missing authorization in the Tablesome plugin (up to version 1.1.35.1) allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized access to functions.
- CVE-2025-68516Medium
The Tablesome plugin (up to version 1.1.35.1) inserts sensitive information into sent data, allowing unauthorized individuals to retrieve embedded sensitive data.
Original NVD description (English source)
Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.1.34.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS