CVE-2026-14924

HighCVSS 7.5

Published: 28/07/2026(UTC)Updated: 28/07/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

The Tablesome Table WordPress plugin before version 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions. This allows unauthenticated users to create new published posts and overwrite arbitrary existing posts and pages.

Risk Assessment

The organization risks complete loss of content control, including unauthorized modification of existing content by unauthenticated users.

Recommendation

Immediately update the Tablesome Table plugin to version 1.1.31 or later.

Other vulnerabilities in Tablesome Table

CVE-2026-66659Critical
The Tablesome Table plugin for WordPress (versions up to 1.2.9) is vulnerable to blind SQL injection. An attacker can exploit improper neutralization of special elements in SQL commands.

Original NVD description (English source)

The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages.