CVE-2025-68516
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
The Tablesome plugin (up to version 1.1.35.1) inserts sensitive information into sent data, allowing unauthorized individuals to retrieve embedded sensitive data.
Risk Assessment
Sensitive data may be exposed, potentially leading to privacy breaches or information leakage.
Recommendation
Update the Tablesome plugin to the latest version and review whether unnecessary sensitive data is being sent.
Other vulnerabilities in Tablesome
See all- CVE-2025-68517Medium
Missing authorization in the Tablesome plugin (up to version 1.1.35.1) allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized access to functions.
- CVE-2025-66526Medium
The Tablesome plugin up to version 1.1.34 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
Original NVD description (English source)
Insertion of Sensitive Information Into Sent Data vulnerability in Essekia Tablesome tablesome allows Retrieve Embedded Sensitive Data.This issue affects Tablesome: from n/a through <= 1.1.35.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS