CVE-2025-68517
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Missing authorization in the Tablesome plugin (up to version 1.1.35.1) allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized access to functions.
Risk Assessment
An unauthorized person may gain access to sensitive functions or data, potentially compromising system integrity and confidentiality.
Recommendation
Update the Tablesome plugin to the latest version and review permission configuration to ensure proper authorization.
Other vulnerabilities in Tablesome
See all- CVE-2025-68516Medium
The Tablesome plugin (up to version 1.1.35.1) inserts sensitive information into sent data, allowing unauthorized individuals to retrieve embedded sensitive data.
- CVE-2025-66526Medium
The Tablesome plugin up to version 1.1.34 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
Original NVD description (English source)
Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.1.35.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS